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Abstract 



An algorithm for computing the stable model semantics of logic 
programs is developed. It is shown that one can extend the semantics 
and the algorithm to handle new and more expressive types of rules. 
Emphasis is placed on the use of efficient implementation techniques. 
In particular, an implementation of lookahead that safely avoids testing 
every literal for failure and that makes the use of lookahead feasible is 
presented. In addition, a good heuristic is derived from the principle 
that the search space should be minimized. 

Due to the lack of competitive algorithms and implementations for 
the computation of stable models, the system is compared with three 
satisfiability solvers. This shows that the heuristic can be improved by 
breaking ties, but leaves open the question of how to break them. It 
also demonstrates that the more expressive rules of the stable model se- 
mantics make the semantics clearly preferable over propositional logic 
when a problem has a more compact logic program representation. 
Conjunctive normal form representations are never more compact than 
logic program ones. 
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1 Introduction 



Logic programming with the stable model semantics has emerged as a viable 
constraint programming paradigm [34, 42]. In this paradigm problems are 
expressed as logic programs, and the stable models of the programs give 
the solutions to the problems. Since it is in general hard to compute stable 
models, the typical algorithm employs an exhaustive search when it tries to 
find a stable model. Different algorithms vary in how much of the structure 
of a program they exploit when they limit their search. 

We extend the stable model semantics to include three new types of 
rules: 

• choice rules for encoding subsets of a set, 

• cardinality rules for enforcing cardinality limits on the subsets, and 

• weight rules for writing inequalities over weighted linear sums. 

In addition, we define optimize statements that can be used to find 
the largest or smallest stable models. The new rules can be translated 
into normal rules, but not without introducing extra atoms and rules. The 
motivation for including the new rules comes from reflecting on how to solve 
problems by encoding them as logic programs. More expressive rules lead 
to smaller programs that are easier to solve. The reason for these three 
particular types is found in their usefulness and in the ease and efficiency 
with which they can be implemented. 

We only consider variable-free programs. Ground programs can be pro- 
duced from non ground ones by, for example, the tool Iparse [64]. Accord- 
ingly, we see the propositional rules as primitives that can be employed as 
building blocks for a high level language. 

A procedure for computing the stable models of logic programs contain- 
ing the new rules has been implemented. The procedure and its implemen- 
tation bear the name smodels. The purpose of this work is to explain the 
workings of smodels. 

1.1 Related Work 

The stable model semantics is a form of nonmonotonic reasoning that is 
closely related to the default logic of Reiter [52, 35], circumscription of Mc- 
Carthy [37, 38, 32], and the autoepistemic logic of Moore [39, 21]. Since 
the stable model semantics has become a standard method for supplying 
semantics to nonmonotonic logic programs, there is a considerable inter- 
est in automating its computation. The earliest methods for finding stable 
models were based on the truth maintenance system of Doyle [15] and the 
assumption-based TMS of deKleer [11], see [16, 17, 50]. One of the first 
algorithms that took advantage of the well-founded semantics [65] was the 
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one presented in [29] and generalized in [30]. Lately, more specialized al- 
gorithms have been developed [2, 63, 7, 12, 8, 18]. However, they all suffer 
from exponential space complexity or weak pruning techniques. 

If we look in a broader context, then finding a stable model is a com- 
binatorial search problem. Other forms of combinatorial search problems 
are propositional satisfiability, constraint satisfaction, constraint logic pro- 
gramming and integer linear programming problems, and some other logic 
programming problems such as those expressible in NP-SPEC [6]. The differ- 
ence between these problem formalisms and the stable model semantics is 
that they do not include default negation. In addition, all but the last one 
are not nonmonotonic. 

From an algorithmic standpoint the progenitor of the smodels algorithm 
is the Davis-Putnam (-Logemann-Loveland) procedure [10] for determining 
the satisfiability of propositional formulas. This procedure can be seen as 
a backtracking search procedure that makes assumptions about the truth 
values of the propositional atoms in a formula and that then derives new 
truth values from these assumptions in order to prune the search space. 

While the extended rules of this work are novel, there are some anal- 
ogous constructions in the literature. The choice rule can be seen as a 
generalization of the disjunctive rule of the possible model semantics [54]. 
The disjunctive rule of disjunctive logic programs [51] also resembles the 
choice rule, but the semantics is in this case different. The stable models 
of a disjunctive program are subset minimal while the stable models of a 
logic program are grounded, i.e., atoms can not justify their own inclusion. 
If a program contains choice rules, then a grounded model is not necessarily 
subset minimal. 

Since the optimize statements lexicographically order the stable models, 
they can be used for prioritized reasoning. Priorities have previously been 
used to lexicographically order rules [53, 5] and to order atoms [55]. 

1.2 Applications 

The program smodels has been used in several contexts. In the field of veri- 
fication of distributed systems, it has successfully been applied to deadlock 
and reachability problems [23, 25, 24]. In addition, it has been used to lessen 
the impact of the state space explosion inherent in the reachability analysis 
of place/transition nets [66]. It has also been used for model checking in a 
system for computing alternating fixed points [33]. In the area of product 
configuration it has provided a base for a rule-based language with favorable 
computational properties [62]. An application of smodels in the planning do- 
main has resulted in performance comparable to and sometimes better than 
that of other efficient general purpose planners [13]. Lastly, it has served 
as an implementation base for dynamic constraint satisfaction problems [61] 
and for logic programs with weight constraint rules [47]. 
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1.3 A Brief History 

My work on smodels began in February 1995. For my Master's Thesis [57] I 
implemented a decision procedure for the stable model semantics. The pro- 
cedure had arisen during the work of my instructor, Ilkka Niemela, on au- 
toepistemic logic [40], and it was directly applicable to both default logic [41] 
and the stable model semantics [43] . The algorithm was needlessly complex 
and I was able to simplify it while at the same time making it prune the 
search space more. In response to this, Ilkka devised a way to strengthen 
the algorithm [44, 45] by employing the Fitting semantics [19]. I further 
improved the procedure [58] by making systematic use of backward chain- 
ing [7] and lookahead. Different types of rules were then introduced [59] and 
more optimizations were done. 

1.4 Contributions 

The key contributions of this work are: the new rule types and the extension 
of the stable model semantics, an algorithm for computing the stable models 
of sets of extended rules, and its generalization to compute specific stable 
models. An important contribution is the derivation of a heuristic. The 
heuristic was not found by experimentation, instead it was derived using 
the principle that the search space should be minimized. 

There are also some contributions that concern the efficient implemen- 
tation of the smodels algorithm. Naturally, one must be familiar with the 
algorithm to understand the concepts involved. The first contribution is an 
implementation of lookahead that safely avoids testing every literal for fail- 
ure. The implementation makes the use of lookahead feasible. The second 
contribution decreases the amount of work needed when pruning the search 
space and it consists of the use of source pointers and strongly connected 
components in the computation of the upper closure. The last contribution 
is an improvement of the way smodels backtracks and is a type of backjump- 
ing. 

We also note that the central pruning function, the expand function, is 
an efficient implementation of the well-founded semantics [65, 57]. 

1.5 Outline of the Work 

The stable model semantics and its extension to choice, cardinality, and 
weight rules are presented in Section 2. In Section 3 we present an imple- 
mentation of the semantics, the smodels procedure, that computes stable 
models of logic programs. We also show how the procedure can be extended 
to find specific stable models such as the lexicographically smallest one. 
The implementation is described in greater detail in Section 4, and the com- 
plexity of the reasoning tasks are discussed in Section 5. In Section 6 we 
compare smodels with the Davis-Putnam procedure for testing satisfiability 
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of propositional formulas and with some algorithms for computing stable 
models, and in Section 7 we compare it with some propositional satisfiabil- 
ity checkers by running experiments on random satisfiability problems, on 
pigeon-hole problems, and on Hamiltonian cycle problems. The conclusions 
follow in Section 8. Finally, we state some useful properties of monotone 
functions in Appendix A. 
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2 The Stable Model Semantics 



In this section we introduce the stable model semantics for normal logic 
programs. We extend the semantics to cover three new types of rules: choice 
rules that encode subsets of a set, cardinality rules that enforce cardinality 
limits on the subsets, and weight rules that express inequalities over weighted 
linear sums. In addition, we present the compute statement, which is used 
when one searches for models that contain certain atoms, and the optimize 
statements, which are used when one searches for models of optimal weight. 
We begin by defining the stable model semantics. 

2.1 The Stable Model Semantics 

Let Atoms be a set of primitive propositions, or atoms. A logic program is 
a set of rules of the form 

h <— ai, . . . , a n , not bi, ... , not b m , 

where h, cti, . . . , a n , bi, . . . , b m are members of Atoms. The atom h is the 
head of the rule and the other atoms in the rule make up the body. We call 
the expression not b a not-atom — atoms and not-atoms are referred to as 
literals. 

Example 2.1. Think of a stable model as the set of atoms that are true, 
any other atoms are false. The program 

a <— b 

b <— c, not d 
d <— not b 
c <— a 

has, perhaps surprisingly, only one stable model: the set {d}. 

The stable model semantics for a logic program P is defined as fol- 
lows [22]. The reduct P A of P with respect to the set of atoms A is obtained 
by 

1. deleting each rule in P that has a not-atom not x in its body such 
that x £ A, and by 

2. deleting all not-atoms in the remaining rules. 

The deductive closure of P A is the smallest set of atoms that is closed under 
P A when the rules in P A are seen as inference rules. 

Definition 2.2. A set of atoms S is a stable model of P if and only if S is 
the deductive closure of P s . 
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Example 2.1 (continued). The set {a,b,c} is not a stable model of the 
program P 

a <— b 

b <— c, noi d 
c <— a 

since the deductive closure of 

p{a,b,c} = | a ^ 6> b ^_ c> c ^_ a } 

is the empty set. 

In order to facilitate the definition of more general forms of rules, we 
introduce an equivalent characterization of the stable model semantics. 

Proposition 2.3. We say that f P : 2 Atoms -» 2 Atoms is a closure of the 
program P if 

fp(S) = {h | h<- ai, . . . ,a n , not b\, . . . , not b m G P, 

ai, . . . ,a n e fp{S), h, . . . , b m £ S}. 

Let 

g p (S) = f]{f P (S) | f P : 2 Atoms -> 2 Atoms is a closure}. 
Then, S is a stable model of P if and only if 

S = g P (S). 

Proof. Note that the deductive closure of the reduct P s is a closure, and 
note that for every f P that is a closure, the deductive closure of P s is a 
subset of f P {S). □ 

A stable model is therefore a model that follows from the complement of 
itself by means of the smallest possible closure. One speaks of stable models 
as grounded models, as atoms in the models do not imply themselves. Atoms 
are not true without grounds. 

Remark. The alternative definition of the stable model semantics is basi- 
cally a variation of the definition of the semantics of default logic given 
by Reiter [52]. The function gp just computes the least fixed point of the 
monotonic operator 

fp(A) = {h | h <— a±, . . . , a n , not b\, . . . , not b m G P, 

ai,...,a n e A, h,...,b m £ S}. 
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Example 2.4. The problem of deciding whether a program has a stable 
model is NP-complete [36]. Hence, one can encode satisfiability problems as 
logic programs. The satisfying assignments of the formula 



(a V b V -ic) A (-ia V 6 V A(^VcVrf) 

correspond to the stable models of the program 

a <— no£ a' a' <— noi a 

6 <— noi 6' 6' <— not b 

c <— no£ c' c' <— noi c 

/aZse <— no£ a, no£ 6, c false <— a, not b, d 

false <— b, not c, not d contradiction <— noi contradiction, false 

In this case, there are ten satisfying assignments. The encoding works by 
rejecting models that contain false and by stating that an unsatisfied clause 
implies false. The intersection of a stable model and the atoms in the 
formula is a satisfying assignment. 



2.2 More Expressive Rules 

Consider the problem of ensuring that at most k of the atoms ai,...,a n are 
included in every stable model of a program. A naive programmatic solution 
would consist of the rules 



{false <- a h , . . . , a ik+1 \ 1 < i\ < ■ ■ ■ < i k +\ < n} 

of which there are ( fc ™ x ) and of the stable models that do not include false. 
There is also a quadratic solution, or to be more precise, a solution that 
needs on the order of nk rules. 

Let the atom l(ai,j) represent the fact that at least j of the atoms 
in {dj, . . . ,a n } are in a particular stable model. Then, the demand that 
at most k of ai, . . . ,a n are in a model can be handled by the constraint 
false <— l(a±, k + 1). The definition of l(ai,j) is given by the program 

l(di,j) <- l(a i+1 ,j) 
l(ai,j + 1) <- ai,l(a i+1 ,j) 
l(a,i, 1) <— di 

and we need about nk instances of it to cover all values of i and j. 

There is a need for a representation that is more compact. We pro- 
pose to introduce three types of rules that have sufficient expressiveness to 
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compactly describe problems such as the one above. The first type is the 
cardinality rule, which is of the form 

h <— k {ai, . . . , a n , not b±, ... , not b m }. 

It is interpreted as follows: if at least k literals in the set 

{ai, . . . , a n , not bi, ... , not b m } 

are satisfied by a stable model, then the atom h must be in the stable model. 
An atom a is satisfied by a stable model S if a G S and a not-atom not b is 
satisfied by S if b 5. 

Example 2.5. Once is a mistake, twice is a habit. Or, 

habit <— 2 {mistakei, . . . , mistake n }. 

The second type is the choice rule, 

{/ii, . . . , h k } <- ai, . . . ,a n , not h,..., not b m , 

which implements a nondeterministic choice over the atoms in {hi, . . . ,h k } 
whenever the literals in the body are satisfied by a stable model. That is, 
the rule gives ground for the inclusion of any number of atoms in its head. 
For example, the rule 

{h!,...,h k } <- 
can be encoded by the program 

hi <— not h\ 

h\ <— not hi, i = 1, . . . , k. 

Example 2.6. Each stable model of the program 

{di,d 2 ,d 3 ,d 4 } <- 

false <— not a±, not d2, not a^, not 

that does not contain false includes at least one atom. 

Finally, the third type of rule, the weight rule, is of the form 

h <- {di = w ai , . . . ,a n = w an , not bi = w bl ,..., not b m = w bm } > w, 

and its head h will be in a stable model S if 

Yl Wa * + Yl Wb * - w - 
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Here, the weights are real numbers. 

We can restrict ourselves to positive weights, since a rule with negative 
weights can be translated into a rule with only positive weights. Namely, 

h <— {a = w a , b = —Wb, not c = w c , not d = —Wd} > w, w a , w b , w c , > 

is equivalent to 

h <— {a = w a , b = —Wb, b = Wb, not b = Wb, 

not c = w c , not d = —Wd, not d = Wd, d = Wd} > w + Wb + Wd 

which is equivalent to 

h <— {a = w a , not b = Wb, not c = w c , d = Wd} > w + Wb + Wd- 

Furthermore, the rule 

h <- {ai = w ai , . . . , a n = w an , not b 1 = w bl ,..., not b m = w bm } < w 

can be transformed into 

h <- {ai = -w ai ,...,a n = -w an , 

not bi = -w bl ,. .. ,not b m = -w bm } > -w. 

Example 2.7. The stable models of the program 

{ai, ...,an}<- 

false {ai = w±, . . . ,a n = w n } > w 
true <— {ai = v\, . . . ,a n = v n } > v 

containing the atom true but not the atom false correspond to the ways one 
can pack a subset of a\ , . . . , a n in a bin such that the total weight is less 
than w and the total value is at least v. The weights and values of the items 
are given by respectively w±, . . . , w n and v±, . . . , v n . 

Often only stable models including or excluding certain atoms are of 
interest. We can guarantee that every stable model of a program includes a 
specific atom true by adding a rule 

true <— not true 

to the program. Similarly, we can exclude an atom false from all stable 
models of a program with the help of the rule 

contradiction <— not contradiction , false 
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provided that the atom contradiction does not appear anywhere else in the 
program. Despite the simplicity of the two previous rules, we will use com- 
pute statements of the form 

compute {a±, . . . , a n , not b\, ... , not b m } 

to state that we only accept stable models that contain ai, . . . ,a n but not 
b\, ... , b m . 

Example 2.8. The satisfying assignments of the formula 

(a V b V -.c) A (-ia V 6 V -id) A (-16 VcVd) 

correspond to the stable models of the program 

{a, b, c, d} <— 

/afee <— no£ a, noi 6, c 
/afee <— a, no£ b, d 
false <— 6, no£ c, ncrf <i 
compute {not false} 

Sometimes one wants to find the stable model with the least number of 
atoms. Other times the atoms have been given priorities and one wants to 
find the stable model with the highest priority. In order to be able to ex- 
press such preferences, we introduce two optimize statements: the minimize 
statement and its dual the maximize statement. The minimize statement 

minimize {ai = w ai , . . . , a n = w an , not b\ = w bl , . . . , not b m = w bm } 

declares that we want to find a stable model S with the smallest weight 

If there are several minimize statements, then we order the stable models 
lexicographically according to the weights of the statements. In this case, 
the first statement is the most significant. The maximize statement 

maximize {a = w a , not b = u>b} 

is just another way to write 

minimize {a = —w a , not b = —Wb} 

or 

minimize {a = k — w a , not b = k — Wb}, 
if one wants to avoid negative weights. 
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Example 2.9. The lexicographically first stable model of the program 

a <— not b 

b <— not a 
minimize {a = 1} 
minimize {b = 1} 

is {&}. 

Example 2.10. Multiple minimize statements can be written as one: 

minimize {a± = w ai , . . . , a n = w an } 
minimize {b ± = w bl , . . . , b m = w bm } 

is equivalent to 

minimize {ai = 2 k w ai ,...,a n = 2 k w an ,h = w bl , . . . ,b m = w bm } 
if 2 k >Zw bv 

We now turn to the formal definition of the stable model semantics for 
the extended syntax. 

Definition 2.11. A basic rule r is of the form 

h <— oi, . . . , a n , not bi, . . . , not b m 

and is interpreted by the function f r : 2 Atoms x 2 Atoms -» 2 Atoms as follows. 

f r (S,C) = {h\ai,...,a n eC, h,...,b m S}. 

The intuition behind the function f r is that it produces the result of a 
deductive step when applied to a candidate stable model S and its conse- 
quences C. In other words, if C is a deductive closure, then f r (S,C) C C. 
By this reasoning, the definition of f r for the new rules follows straightfor- 
wardly. 

Definition 2.12. A cardinality rule r is of the form 

h <— k {a±, . . . , a n , not b±, . . . , noi b m } 
and is interpreted by 

f r (S, C) = {h\\{a u ...,a n }nC\ + \{h, ...,b m }-S\>k}. 
A choice rule r is of the form 

{hi,..., hk} <— ai, . . . ,a n , not bi,...,not b m 
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and is interpreted by 

f r (S,C) = {h\he {h Xl ...,h k }r\S,a 1 ,...,a n eC,bi,...,b m & S}. 
Finally, a weight rule r is of the form 

h<- {a 1 = w ai ,...,a n = w an ,not bi = w bl ,. . .,not b m = w bm } > w, 
for w ai ,w bi > 0, and is interpreted by 

Ms, c) = {h | £ w *i + E w *i ^ < 

Example 2.13. Let S = {a} be a model of a logic program, one of whose 
rules is r: 

h <- {a = 1, b = 2, not c = 3} > 4. 

Since we expect a stable model to be a deductive closure, we set C = {a} 
and compute f r (S, C) = {h}. As h C, we note that 5 can not be a stable 
model. 

Definition 2.14. Let P be a set of rules. As before we say that fp : 

2 Atoms _^ 2 Atoms ig & closure jf 

M5)= \Jfr(SJp(S)), 
reP 

and we define 

g P (S) = f]{f P (S) | /p : 2 Atoms -> 2^* oms is a closure}. 
Then, S 1 is a stable model of the program P if and only if 

S = g P (S). 

Lemma 2.15. Let P be a logic program and let S be a set of atoms. Define 

f S P {A)= [J MS, A). 

reP 

Then, the least fixed point Ifp(fp) of fp is equal to gp(S). 

Proof. Note that the operator fp(A) is monotonic and that it has a fixed 
point fp(S) for any closure fp. Hence, Ifp(fp) C fp(S) for all fp and 
therefore Ifp(fp) C gp(S). Since Ifp(fp), taken as a function of 5, defines a 
closure, #,(5) C 0p(/|). Thus, g P (S) = lfp{f s P ) follows. □ 
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Example 2.16. Let P be the logic program 

{a,b,c} <- 

true <— 2 {a, 6, c} 
compute {true} 
minimize {a = l,b = 2}. 

The stable models of the two rules in P are 0, {a}, {&}, {c}, {a, b, true}, 
{a, c, true}, {b,c,true}, and {a, b, c, true}, as we can easily check using 
Lemma 2.15. For instance, /p^(0) = {a} = f p a \{a}). Because of the 
compute statement we only want stable models that contain the atom true, 
namely the models {a, b, true}, {a, c, true}, {b,c,true}, and {a, b, c, true}. 
But since there is also a minimize statement we are really only interested in 
the smallest of these: {a,c, true}. 

The stable models of a logic program that do not contain choice rules 
are subset minimal, whereas the stable models of a program with choice 
rules can be subsets of each other. It is therefore not possible to translate 
a program containing choice rules into one with no choice rules without 
introducing new atoms. In this sense, the introduction of choice rules makes 
the stable model semantics more expressive. 

Proposition 2.17. Let P be a logic program that does not contain any 
choice rules. If S and S' are stable models of P, then S C S' implies 
S = S'. 

Proof. Let P be a logic program that does not contain any choice rules and 
let S C S' be two stable models of P. As 

fp(S) = |J f r (S',S) c (J f r (S,S) = ff(S) = s 

reP reP 

since f r (S', S) is anti-monotonic in its first argument, S' = Ifp(fp) C S. □ 

Corollary 2.18. Let P be the set of all logic programs and let P' be the 

set of all logic programs that do not contain choice rules. Then, there is no 
mapping from P to P' that preserves stable models. 

Example 2.19. We can translate the disjunctive rules of the possible model 
semantics [54] into choice rules and basic rules such that possible models 
correspond to stable models. Namely, change every disjunctive rule 

a± V • • • V dfc <— b\ A • • • A b n A not c\ A • • • A not c m 

into a choice rule 

{ai, . . . ,a k } <— bi, . . . , b n , not a, . . . , not c m 
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and a basic rule 

false *— bi, . . . , b n , not c\, . . . , not c m , not a\, . . . , not a&, 
and add the compute statement 

compute {not false}. 
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3 The Algorithm 



Having defined the stable model semantics, we want to find a method that 
can be used to compute stable models. We take the obvious approach and 
enumerate all subsets of the atoms in a program and test each subset for 
stability. During the exhaustive search we make use of the properties of 
the stable model semantics to prune away large numbers of subsets. The 
procedure is put forth as a backtracking search algorithm. Since we want 
to be able to handle large programs, we avoid constructs that require more 
than a linear amount of space. 

At the heart of the algorithm is a set of literals, which we name A, that 
represents a set of stable models. The atoms in the set A are members of 
these models and the not-atoms in the set are atoms that are not in the 
stable models. It follows that if there is an atom in A that also appears 
as a not-atom in A, then the set of models that A represents is empty. 
Hence, our algorithm begins with A as the empty set. It adds atoms and 
not-atoms to A and checks whether the resulting set corresponds to at least 
one stable model. If it does not, then it backtracks by removing atoms and 
not-atoms from A and by changing atoms into not-atoms and vice versa. 
The relationship between the partial model A and one of its stable models 
is exemplified in Figure 1. 

The search space consisting of all possible configurations of A is pruned 
by deducing additions to A from the program using the properties of the 
stable model semantics. For example, if the rule 

a <— b, not c 

is in a program and b, not c G A, then we deduce that every stable model 
of the program that contains b but not c must contain a. Consequently, we 
add a to A. Expanding A can lead to situations in which an atom in A 
is also a not-atom in A. If such a conflict takes place, then the algorithm 
backtracks. 

We can prune the search space some more by wisely choosing what lit- 
erals we add to A. A good heuristic helps, but choosing literals that im- 
mediately give rise to conflicts avoids a lot of backtracking. We find these 
literals by looking ahead: for each literal not in A we temporarily add the 
literal to A, expand it, and check for conflicts. 

We explain the algorithm in greater detail in the rest of the section. 

3.1 The Decision Procedure 

For an atom a, let not (a) = not a, and for a not-atom not a, let 

not (not a) = a. 
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Figure 1: The relation between the set A and one of its stable models S 

For a set of literals A, define 

not (A) = {not (a) | a G A}. 

Let A + = {a G Atoms \ a G A} and let .A - = {a G Atoms \ not a G A}. 
Define Afoms(A) = A + U and for a program P, define Atoms(P) = 
Atoms(L), where L is the set of literals that appear in the program. 

A set of literals A is said to cover a set of atoms B if B C Atoms (A), 
and 5 is said to agree with A if 

A + C B and A~ C Atoms - B. 

Algorithm 1 displays a decision procedure for the stable model semantics. 
The function smodels(P,A) returns true whenever there is a stable model 
of P agreeing with the set of literals A. In fact, the function computes a 
stable model and, as will become apparent, it can be modified to compute 
all stable models of P that agree with A. 

The decision procedure calls four functions: expand(P, A), conflict(P, A), 
lookahead(P, A), and heuristic(P, A) . The function expand(P, A) expands 
the set A using the functions Atleast(P, A) and Atmost(P, A), the function 
conflict(P, A) discovers conflicts, and the function heuristic(P, A) computes 
heuristically good literals that can be included in A. For now we let the 
function lookahead(P, A) return A. 

Let A' = expand(P, A). We assume that 

El A C A' and that 

E2 every stable model of P that agrees with A also agrees with A'. 

Moreover, we assume that the function conflict (P, A) satisfies the two con- 
ditions 

CI if A covers Atoms(P) and there is no stable model that agrees with A, 
then conflict (P, A) returns true, and 
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function smodels(P, A) 
A := expand(P, A) 
A := lookahead(P, A) 
if conflict (P, A) then 

return false 
else if A covers Atoms(P) then 

return true {A + is a stable model} 
else 

x := heuristic(P, A) 

if smodels(P, A U {x}) then 

return true 
else 

return smodels^P, A U {not (a;)}) 
end if 
end if. 

function expand (P, A) 
repeat 

A' :=A 

A := ;4iZecw*(P, A) 

A := A U {no£ x | x <G Atoms(P) and x Atmost(P, A)} 
until A = A' 
return A. 

function conflict(P,A) 

{Precondition: A = expand(P, A)} 
if A + n A - ^ then 

return true 
else 

return false 
end if. 

function lookahead(P, A) 
return A. 

Algorithm 1: A decision procedure for the stable model semantics 



17 



C2 if conflict(P, A) returns true, then there is no stable model of P that 
agrees with A. 

In addition, we expect heuristic(P, A) to return a literal not covered by A. 

Theorem 3.1. Let P be a set of rules and let A be a set of literals. Then, 
there is a stable model of P agreeing with A if and only if smodels (P, A) 
returns true. 

Proof. Let nc(P, A) = Atoms(P) — Atoms(A) be the atoms not covered by 
A. We prove the claim by induction on the size of nc(P, A). 

Assume that the set nc(P, A) = 0. Then, A' = expand(P, A) covers 
Atoms(P) by El and smodels(P, A) returns true if and only if conflict(P, A') 
returns false. By E2, CI, and C2, this happens precisely when there is a 
stable model of P agreeing with A. 

Assume nc(P, A) / 0. If conflict(P, A') returns true, then smodels(P, A) 
returns false and by E2 and C2 there is no stable model agreeing with A. 
On the other hand, if conflict (P, A') returns false and A' covers Atoms(P), 
then smodels(P,A) returns true and by E2 and CI there is a stable model 
that agrees with A. Otherwise, induction together with El and E2 show 
that smodels (P, A' U {x}) or smodels(P,A' U {not (x)}) returns true if and 
only if there is a stable model agreeing with A. □ 

Let S be a stable model of P agreeing with the set of literals A. Then, 
f r (S, S) C S for r G P, and we make the following observations. Let 

min r (A)= P| f r {C,C) 

A+CC 
A-[~iC=0 

be the inevitable consequences of A, and let 

max r (A) = (J f r (C,C) 

A+CC 
A-C\C=% 

be the possible consequences of A. Then, 

1. if r G P, then S agrees with min r (A), 

2. if there is an atom a such that for all r <G P, a max r (A), then S 
agrees with {not a}, 

3. if the atom a £ A, if there is only one r£P for which a G max r (A), 
and if there exists a literal x such that a max r (A U {x}), then S 
agrees with {not (x)}, and 

4. if not a E A and if there exists a literal x such that for some r € P, 
a £ min r {A U {x}), then S agrees with {not (x)}. 
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Note that if a, not a G A, then min r (A) = Atoms and max r (A) = 0. 
Proposition 3.2. The claims 1-4 hold. 
Proof. Recall from Lemma 2.15 that 

f s P (A)= \Jf r (S,A) 

reP 

is monotonic and that its least fixed point is equal to g p (S). Hence, if S is 
a stable model of P, then for any r G P, f r (S, S) C S. 

Let the stable model S agree with the set A. As min r {A) C f r (S,S), 
the first claim follows. Notice that 

S= (J / r (5,5). 

reP 

If for all r <G P, a g" max r (A), then for all r G P, a G" /r(<S', 5 1 ) and conse- 
quently a S. This proves the second claim. 

If a G ^4 and there is only one r G P for which a G maa; r (A), then 
a G f r (S,S) C S. If a max r (A U {x}) for some literal x and if S agrees 
with {x}, then a g" / r (5, S 1 ) which is a contradiction. Thus, the third claim 
holds. 

Finally, if not a £ A and there is a literal x such that for some r G P, 
a G min r (A U {x}), then by the first claim a £ S which is a contradiction. 
Therefore, also the fourth claim is true. □ 

The four statements help us deduce additional literals that are in agree- 
ment with S. Define Atleast(P, A) as the smallest set of literals containing 
A that can not be enlarged using 1-4 above, i.e., let Atleast(P, A) be the 
least fixed point of the operator 

f(B) = AuB 

U {a G min r (B) \ a G Atoms (P) and r G P} 

U {not a | a G Atoms(P) and for all r G P, a g" max r (P)} 

U {no£ (x) | there exists a G B such that a G max r (B) 

for only one r G P and a ^ max r (B U {x})} 
U { no£ (x) | there exists not a G P and r G P such that 

a G min r (B U {x})}. 

Example 3.3. Let P be the program 

a <— 6, no£ c 
a! <— noi a 
e <— not 6 
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We will compute A = Atleast(P, {d}). Since c does not appear in the head 
of any rule in P, not c £ A by claim 2. As d £ A, not a £ A by claim 3. It 
follows that not b £ A by 4. Finally, e £ A by 1. Hence, Atleast(P, {d}) = 
{not a, not b, not c, d, e}. 

Lemma 3.4. The function Atleast(P, A) is monotonic in its second argu- 
ment. 

Proof. Observe that the function min r (B) is monotonic and that the func- 
tion max r (B) is anti- monotonic. Hence, 

{a £ min r (B) \ r £ P}, 
{not a \ a £ Atoms(P) and for all r £ P, a max r (B>)}, 



and 



{not (x) | there exists not a £ B and r £ P such that a £ min r (B U {2;})} 

are monotonic with respect to B. Assume that there exists a £ B such that 
a £ max r (B) for only one r £ P and a max r (B U {x}). If B C B' and 
a max r (B'), then 

noi a E {not a! \ a! £ Atoms {P) and for all r £ P, 

a' maav(£')} Q f( B ')- 

Consequently, both a, not a £ f(B') and therefore 

mffl r (/(B')) = Atoms, 



and 



max r (f{B')) = 0. 

It follows that f(f(B')) = Atoms(P) U not (Atoms (P)) . Thus, / 2 is mono- 
tonic and has a least fixed point. Finally, notice that / has the same fixed 
points as f 2 . By the definition of/,BC /(B). Thus, / 2 (B) = B implies 

BCf(B)Cf(f(B))=B. 

□ 

We conclude, 

Proposition 3.5. If the stable model S of P agrees with A, then S agrees 
with Atleast(P,A). 

Furthermore, we can bound the stable models from above. 
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Definition 3.6. For a choice rule r of the form 

{hi, ...,h k }<- ai, ... ,a n , not bi, ... , not b m , 

let 

fr(S,C) = [h e {hi,...,h k }\ai,...,a n € C, bi,...,b m S}, 

and for any other type of rule, let f' r {S,C) = f r {S,C). Let P be a set of 
rules and let A be a set of literals. Define Atmost(P, A) as the least fixed 
point of 

f'(B)= \Jf' r {A + ,B-A-)-A-. 

reP 

Proposition 3.7. Let S be a stable model of P that agrees with A. Then, 
S C Atmost(P,A). 

Proof. Note that f' r (S, C) is anti-monotonic in its first argument, i.e., S C S' 
implies f' r {S',C) C f' r {S,C), and monotonic in its second argument. Fix a 
program P, a stable model S of P, and a set of literals ^4 such that S agrees 
with A. Define 

f S P {B)= \Jfr(S,B) 

reP 

and 

f'(B)= \Jti(A + ,B-A-)-A-. 

reP 

Let L be the least fixed point of /'. Since S agrees with A, 

f r (S, SDL)Q MA + , S n L - A~) - A~, 

and fp{S n L) C /'(5 fl L) C I. Hence, for varying P, the least fixed point 
of fp(S fl B), which is equal to the least fixed point of fp, is a subset of L 
by Lemma A.l. In other words, SQL. □ 

It follows that expand(P, A) satisfies the conditions El and E2. The 
function conflict (P, A) obviously fulfills C2, and the next proposition shows 
that also CI holds. 

Proposition 3.8. If A = expand(P, A) covers the set Atoms(P) and A + n 
A~ = 0, then A + is a stable model of P. 
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Proof. Assume that A = expand (P, A) covers Atoms(P) and that A + (~)A = 
0. Then, A+ = Atmost(P,A) and 

f r (A+, B) = f' r (A + ,B) -A- = f' r (A + ,B - A') - A~ 

for every B C A+, since f r (A+,B) C f r (A+,A+) = min r (A) C A+. Thus, 
is the least fixed point of 

fp + (B)= \Jf r (A + ,B), 

reP 

from which we infer, by Lemma 2.15, that A + is a stable model of P. □ 

Example 3.9. Let P be the program 

a <— no£ 6 
c <— a 

Then, 4fro 0S *(P, 0) = {a,c} as b (0,0) = {a} and /^ a (0,{a}) = {c}. 

But, Atmost(P, {not a}) = 0. 

Example 3.10. Let P be the program 

a <— no£ 6 
6 <— no£ a, c 
c <— c 

By computing ^4 = expand(P,%) we see that this program has only one 
stable model. Namely, Atleast(P, 0) = and Atmost{P,$) = {a}. Hence, 
not b,not c G A. Since Atleast(P, {not b,not c}) = {a, not b,not c} and 
since Atmost(P, {a, not b, not c}) = {a}, ^4 = {a, noi 6, noi c}. Therefore, 
A covers Atoms (P) and {a} is the only stable model of P. 

Example 3.11. The smodels algorithm traverses a search space consisting 
of sets of literals. One can visualize the path the algorithm takes as a tree 
whose nodes are the sets and whose edges are labeled with the heuristic 
choices that have been made during the computation. By convention we 
assume that the algorithm goes down the left branch first. Hence, the whole 
computation corresponds to an in-order traversal of the tree. For example, 
in Figure 2 the algorithm first tries the atom a and experiences a conflict. 
It then changes to not a and tries not b from which it continues through 
some unspecified choices that all lead to a conflict. After this b is asserted 
and the choice of the atom c ends in a stable model. 
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X stable 



Figure 2: A visualization of the search process 




Figure 3: Looking ahead yields a potentially smaller search space 



3.2 Looking Ahead 

The expand function does a good job of reducing the search space. It makes 
use of some simple properties of the stable model semantics to refine a 
partially computed model. Even if the function only has to satisfy the two 
general conditions El and E2, it is in practice severely constrained by the 
small amount of time it can take to do its work. Since the function is 
called so often, it must be fast. Otherwise, the algorithm will not achieve 
acceptable performance on programs with many stable models. 

By E2 the expand function must not loose any stable models. It can 
therefore not enlarge the partial model A by much if there are many stable 
models agreeing with A. A slower but slightly better expand function does 
not help. On the other hand, if a partial model does not agree with any 
stable models, then expand should return as large a set as possible. A slower 
function is not such an objection then. This dichotomy is addressed here. 

The expand function as presented is a compromise that sacrifices opti- 
mality for performance. We want to strengthen it to better handle partial 
models that can not be enlarged to stable models. Consider a program P, 
a partial model A, and an atom a such that both expand(P, A U {a}) and 
expand (P, AD {not a}) contain conflicts, i.e., conflict (P, A') returns true for 
A' = expand(P, A U {x}), where x = a, not a. If smodels(P, A) chooses a 
or not a immediately, then it will return after only two expand calls. If it 
does not, then the number of expand calls can be potentially very large, as 
is illustrated in Figure 3. 

The literals that instantly give rise to conflicts can be found by testing. 
We call the testing procedure lookahead, as it corresponds to looking ahead 
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function lookahead (P, A) 
repeat 

A' := A 

A := lookahead _once{P, A) 
until A = A 1 
return A. 

function lookahead _once(P, A) 
B := Atoms(P) - Atoms(A) 
B :=BU not (B) 
while B ^ do 

Take any literal x G B 

A' := expand(P, A U {x}) 

B := B — A' 

if conflict (P, A') then 

return expand(P, A U {not (x)}) 

end if 
end while 
return A. 

Algorithm 2: Looking ahead 

and seeing how smodels behaves when it has chosen a literal. Observe that if 
the stable model S agrees with the partial model A but not with A U {x} for 
some literal x, then S agrees with A U {not (x)}. Hence, we make progress 
as soon as we find a literal x that causes a conflict. That is to say, we can 
then enlarge A by not (x). In addition, since x' £ expand(P, Au{x}) implies 

expand(P, A U {x'}) C expand(P, expand(P, A U {x})) 
= expand(P, A U {x}) 

due to the monotonicity of expand, it is not even necessary to examine all 
literals in Atoms(P) not covered by A. As we test a literal x we can directly 
rule out all atoms in expand(P, AL){x}). We implement lookahead according 
to these observations by rewriting the function lookahead as in Algorithm 2. 
Possibly calling expand on the order of \Atoms(P) — ylfoms^)! times for 
each new literal might not seem like a good idea, but in practice it has 
proven amazingly effective. 

The idea that one can use the detection of conflicts to prune the search 
space has been presented in the context of propositional satisfiability check- 
ers by Zabih and McAllester [67]. It is interesting to note that they con- 
cluded that the pruning method seems promising but causes too much over- 
head. Modern satisfiability checkers avoid the overhead by only employing 
lookahead on a small heuristically chosen subset of all atoms. 
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3.3 Heuristics 



The heuristic choices that are made in a backtracking algorithm can dras- 
tically affect the time the algorithm has to spend searching for a solution. 
Since a correct choice brings the algorithm closer to a solution while a wrong 
choice leads the algorithm astray, great effort is often expended on creating 
heuristics that find the correct choices. This seems to be a bad approach. A 
heuristic invariably fails at some point, otherwise it would not be a heuristic, 
and then it tries to find nonexistent solutions when it should be minimizing 
the duration of the search in that part of the search space. We will therefore 
optimize our heuristic for the case of no stable models. That is, we will try 
to minimize the size of the remaining search space. 
For a literal x, let 

A p = expand(P, A U {x}) 

and 

A n = expand [P, A U {not (x)}). 

Assume that the search space is a full binary tree of height H. A full binary 
tree is a binary tree whose paths from the root to the leaves are all of equal 
length. Let p = \ A P — A\ and n = \A n — A\. Then, 

2 H- P + 2 H-n = 2 g2 n + 2P 
2P+n 

is an upper bound on the size of the remaining search space. Minimizing 
this number is equal to minimizing 

2 n + 2 P 

log^ T ^ = log(2" + 2f)-(p + n). 



Since 



2max(n,p) ^ 2 n _|_ 2^ < 2 max ( ri 'P)+-'- 



is equivalent to 



max(n,_p) < log(2 n + 2 P ) < max(n,_p) + 1 

and 



— min(n,p) < log(2 n + 2 P ) — {p + n) < 1 — min(n,p), 

it suffices to maximize min(n,p). If two different literals have equal mini- 
mums, then one chooses the one with the greater maximum, as this mini- 
mizes 2~ max ( n ' p ). 
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When the best literal x has been found, we have to return one of x 
and not (x). If there are no stable models agreeing with A, then it does not 
matter which one. But if there are stable models agreeing with both AD {x} 
and Au{not (x)}, then we should again try to minimize the remaining search 
space. Hence, we return the one that shrinks the search space the most. 

The function heuristic is shown in Algorithm 3. In an implementation 
of smodels one naturally integrates lookahead and heuristic to avoid unnec- 
essary work. At the same time one can take advantage of the fact that 
x' G expand(P, A U {x}) implies 

| expand (P, A U {a/}) - A\ < \ expand (P, A U {x}) - A\ 

to evade some of the expand computations. 

Freeman noted in [20] that a good satisfiability heuristic should choose 
the literal that minimizes the quantity 2 H ~ P + 2 H ~ n , where n and p are 
computed using unit propagation instead of expand. It is again interesting 
to note that he then concluded that such a heuristic is too slow in practice. 

function heuristic (P, A) 
B := Atoms(P) - Atoms(A) 
rain : = 
max := 
while B / do 

Take any atom a G B 

B := B — {a} 

p := \expand(P, AU {a}) - A\ 
if p > min then 

n := \ expand( y P, A U {not a}) — A\ 

if min(n,p) > min or (min(n, p) = min and max(n,p) > max) then 
min := min(n,p) 
max := max(n,p) 
if p = m&x(n,p) then 

x := a 
else 

x := not a 
end if 
end if 
end if 
end while 
return x. 

Algorithm 3: The heuristic 
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Lookahead order 

The lookahead function does not test the literals in any particular order. 
Since the function returns as soon as it finds a conflict, it is desirable that 
it should find them as soon as possible. We notice that in a large program 
P and for a small set of literals A, expand(P, A U {x, y}) probably does not 
contain a conflict if expand(P, A U {x}) does not. Therefore, if we first test 
a literal x and do not find a conflict and then test another literal y and 
find a conflict, then expanding A L) {x, not (y)} will quite likely not lead 
to a conflict. Hence, keeping the literals in a least recently used order is 
reasonable. Indeed, it has been verified that it often removes many needless 
expand calls. 

3.4 Searching for Specific Stable Models 

Besides searching for one stable model, one may also search for many, all, or 
just certain stable models. All of these variants can easily be incorporated 
into the smodels algorithm. In particular, we will deal with the case of 
optimize statements, as we must at least implicitly examine all stable models 
to find the smallest or largest one. 

The simplest way to handle the search for specific stable models is to 
modify the conflict (P, A) function such that it returns true whenever one 
can be sure that we are not searching for any stable models agreeing with 
A. This can be thought of as changing what it means for a stable model 
to agree with a set of literals. Only the stable models that we accept can 
agree with a set of literals. Hence, we need not redo the proof of soundness 
and completeness for the modified algorithm. The new conflict function is 
presented in Algorithm 4. The function unacceptable (P, A) implements the 
test for the acceptable stable models. If it returns true, then there must 
not be any acceptable stable models agreeing with A. Moreover, if A + is 
a stable model that is not acceptable, then unacceptable (P, A) must return 
true. 

function conflict (P, A) 

{Precondition: A= expand(P, A)} 
if A + n A- + then 

return true 
else 

return unacceptable (P, A) 
end if. 

Algorithm 4: Removing unacceptable stable models 

What about computing all stable models of a program? We can control 
how many stable models are computed by calling a function stable(P,A) 
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function smodels (P, A) 
A := expand (P, A) 
A := lookahead(P, A) 
if conflict (P, A) then 

return false 
else if A covers Atoms(P) then 

return stable(P, A) {A + is a stable model} 
else 

x := heuristic(P, A) 

if smodels (P, A U {x}) then 

return true 
else 

return smodels (P, A U {not (x)}) 
end if 
end if. 

Algorithm 5: A generalization of the decision procedure 

instead of returning true when a stable model has been found, cf Algo- 
rithm 5. If stable(P, A) returns false, then the algorithm will search for the 
next model. Otherwise, it stops. Since returning false from stable is indis- 
tinguishable from returning false from conflict, it is guaranteed that stable is 
only called for acceptable stable models. If stable always returns false, then 
it will be called once for every stable model of P. Therefore, the function 
can be used to, e.g., display or count the models. 

We now turn to the optimize statements. Without loss of generality we 
consider only programs containing one minimize statement and only positive 
weights: 

minimize {a 1 = w ai , . . . , a n = w Qn , not bi = w bl , . . . , not b m = w bm }. 

We let the literals not in the minimize statement have zero weight. Let 
B be a global variable that is initially empty. We define the acceptable 
models as models whose weight is smaller than the weight of B if B is not 
empty. When an acceptable stable model A + is found we assign A to B. 
In addition, we let stable always return false. Thus, when smodels returns, 
B contains a stable model of minimal weight if one exists. Otherwise, it is 
empty. The corresponding unacceptable and stable functions are portrayed 
in Algorithm 6. 



28 



function unacceptable(P, A) 

if B ^ and J2 a eA w a + £„ « beA w b > J2 a eB w a + J2 no t beB w b then 

return true 
else 

return false 
end if. 

function stable(P,A) 
B := A 
return false. 

Algorithm 6: Finding a minimal stable model 



29 



30 



4 Implementation 



In this section we will present an efficient implementation of the functions 
Atleast(P, A) and Atmost(P, A). Both implementations are variations of a 
linear time algorithm of Dowling and Gallier [14]. We will also examine 
various optimizations that can be used to improve the implementation and 
the smodels algorithm. 

The basic Dowling-Gallier algorithm computes the deductive closure of 
a set of basic rules in time linear in the size of the set of rules. The rules 
must not contain any not-atoms, i.e., they are Horn clauses. A variant of 
the basic algorithm is shown in Algorithm 7. It follows naturally from one 
observation and one implementation trick. We observe that a deductive step 
is monotone. Namely, if the body of a rule is in a set of atoms, then it is 
also in any superset of the same set. Hence, the order in which the rules are 
applied does not matter. The trick is to use a counter for each rule to find 
out when a rule can be used in the deduction. The counters should initially 
hold the number of atoms in the bodies of the rules. Every time an atom 
is added to the closure, the counters of the rules in whose bodies the atom 
appears are decremented. If any counter reaches zero, then the body of the 
corresponding rule is in the closure and the head of the rule is put in the 
closure. The basic algorithm is obviously correct. An atom is in the closure 
if and only if the atom is the head of a rule whose body is in the closure. 

procedure Dowling-Gallier (P) 

{Invariant: |body — closure) = counter and counter = is equivalent to 
head £ closure U queue} 

Initialize the counter of every rule to the number of atoms in its body 
let the queue contain the heads of the rules in P whose bodies are empty 
while the queue is not empty do 

remove the first element from the queue and call it a 

if a is not in the closure then 
add a to the closure 

for each rule r E P in whose body a appears do 
decrement the counter of r by one 
if the counter of r is equal to zero then 

append the head of r to the end of the queue 
end if 
end for 
end if 
end while. 

Algorithm 7: The basic Dowling-Gallier algorithm 
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4.1 At Least 



We begin with basic rules of the form 

h <— a±, . . . , a n , not b\, ... , not b m . 

For every rule r G P we create a literal counter r. literal that holds the 
number of literals in the body of r that are not members of the partially 
computed closure Atleast(P, A). In addition, an inactivity counter r. inactive 
is also created. If the set A is a partially computed closure, then the in- 
activity counter records the number of literals in the body of r that are in 
not (A). The counter r. inactive is therefore positive, and the rule r is inac- 
tive, if the set max r {A) is empty and one can not then use r to deduce its 
head. For every atom a we create a head counter a.headof that holds the 
number of active rules with head a. 

Recall that a literal can be brought into Atleast(P, A) in four different 
ways. We handle the four cases with the help of the three counters. 

1. If r. literal reaches zero, then the head of r is added to the closure. 

2. If a.headof reaches zero, then not a is added to the closure. 

3. If a.headof is equal to one and a is in the closure, then every literal in 
the body of the only active rule with head a is added to the closure. 

4. Finally, if a is the head of r, if not a is in the closure, and if r. literal = 1 
and r. inactive = 0, then there is precisely one literal x in the body of 
r that is not in the closure, and not (x) is added to the closure. 

Cardinality rules and choice rules are easily incorporated into the same 
framework. Specifically, one does neither use the first nor the fourth case to- 
gether with choice rules, and one does not compare the literal and inactivity 
counters of a cardinality rule 

h <— k {a±, . . . , a n , not b±, . . . , not b m } 

with zero but with m + n — k. A weight rule 

h <— {ai = w ai , ■ ■ ■ , a n = w a „ , not b\ = w bl , . . . , not b m = w bm } > w, 

is managed using the upper and lower bound of the sum of the weights in 
its body. Given a set of literals A, the lower bound is 

aieA+ bi<=A- 

and the upper bound is 

aitt A- bi<£A+ 
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If the upper bound is less than w, then the rule is inactive, and if the lower 
bound is at least w, then the head is in the closure. 

Note that by Lemma 3.4 the order in which the four ways of bringing 
atoms into the closure are used is of no importance for the end result. The 
actual implementation will not compute all of Atleast(P,A) when it equals 
Atoms(P) U not ( Atoms (P)), but a subset B that satisfies B + n B~ / 0. 
This is enough since no conflicts are lost. 

In preparation for the procedure that computes Atleast(P, A), we con- 
struct two Boolean flags for each atom a: a.inA + is set to true when a is 
included in the closure Atleast(P, A) and a.inA+ is set to true when not a 
is included in the closure. All atoms have three lists as well. The list a.plist 
contains pointers to every rule r for which a € r.body, the list a.nlist con- 
tains pointers to every rule r for which not a € r.body, and the list a.hlist 
contains pointers to every rule r for which a £ r.head. To summarize, we 
have the following variables: 

a.headof The number of active rules whose head contains a. 
a.inA + A flag that is true if a is in the current closure. 
a.inA~ A flag that is true if not a is in the current closure. 
a.plist The rules in whose bodies a appears. 
a.nlist The rules in whose bodies not a appears. 
a.hlist The rules in whose heads a appears. 

r. literal The number of literals in the body that are in the current closure. 

r. inactive The number of literals in the body that are in the negation of the 
current closure, i.e., in not (A) if A is the current closure. 

r.body The body of the rule r. 

r.head The head or heads of the rule r. 

The procedure atleast() that computes Atleast{P, A) is described in Al- 
gorithm 8. It follows the basic Dowling-Gallier algorithm, but extends it to 
handle the four ways a literal can be included in Atleast(P, A). The pro- 
cedure is written such that the main work happens in the four functions 
fire(), inactivate^), backchaintrue() , and backchainfalse(), corresponding to 
the cases 1, 2, 3, and 4, respectively. We need specific instances of these 
functions for every type of rule. Therefore, we write r.fireQ to denote the 
ftreQ function that corresponds to the rule r, and we use the same notation 
for the other functions. The instances used together with basic rules are 
given in Algorithms 9-10. The rest are in Appendix B. Since the procedure 
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procedure atleastQ 

while posq or negq are not empty do 
if posq is not empty then 
a := posq.popQ 
a.inA + := true 
for each rule r G a.plist do 

r.fireQ 
end for 

for each rule r G a.nlist do 

r.inactivateQ 
end for 

if a.headof = 1 then 

Let r be the only active rule in a.hlist 

r. backchaintrue () 
end if 
end if 

if negq is not empty then 
a := negq. pop () 
a.inA" := true 
for each rule r G a.nlist do 

r.fireQ 
end for 

for each rule r G a.plist do 

r.inactivateQ 
end for 

if a.headof > then 

for each rule r in a.hlist do 

r. backchainfalse () 
end for 
end if 
end if 
end while. 

Algorithm 8: The implementation of Atleast(P, A) 
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function r.fire{) 

r. literal := r. literal — 1 
if r. literal = then 

posq .push (r. head ) 
else if r.head.inA~ then 

r. backchainfalseQ 
end if. 

function r.inactivateQ 
r. inactive := r. inactive + 1 
if r. inactive = 1 then 
a := r.head 

a.headof := a.headof — 1 
if a.headof = then 

negq.push(a) 
else if a.inA + and a.headof = 1 then 

Let r' be the only active rule in a.hlist 

r' . backchaintrue () 
end if 
end if. 

Algorithm 9: Auxiliary functions for the basic rules 

atleastQ and the functions must be efficient they do not take any arguments 
but work on global data. 

Two queues are used in atleastQ: posq and negq. We assume that they 
are implemented such that pushing an atom onto the end of a queue does 
nothing if the atom is already on the queue. In addition, we assume that 
pushing an atom a whose a.inA + flag is true onto the queue posq or pushing 
an atom a whose a.inA~ flag is true onto the queue negq also have no effect. 
These assumptions have a simple Boolean flag implementation and they 
make the descriptions a bit shorter. 

One can use stacks instead of queues, but tests have shown that queues 
are faster. The reason seems to be that if there is a conflict, then it is found 
quicker if one derives literals breadth-first using a queue than if one derives 
them depth-first using a stack. A stack implementation might do a lot of 
work before it notices a conflict that is only a few rules from the start of the 
derivation. 

Before computing Atleast(P, A) we have to initialize the queue posq with 
A + and the heads of the rules whose bodies are empty. The queue negq must 
be initialized with the atoms in A~ . Observe that the procedure can also 
be used incrementally. If Atleast(P, A) has been computed and we are going 
to compute Atleast(P, A U {a}), then we just initialize posq with a and call 
atleastQ. 
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function r.backchaintrue() 
for every a € r.body + do 

posq.push(a) 
end for 

for every a € r.body~ do 

negq.push(a) 
end for. 

function r.backchainfalseQ 

if r. literal = 1 and r. inactive = then 
for every a G r.body + do 
if a.inA + = false then 
negq.push(a) 
return 
end if 
end for 

for every a G r.body~ do 
if a.inA~ = false then 

return 
end if 
end for 
end if. 

Algorithm 10: More auxiliary functions for the basic rules 
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Proposition 4.1. The procedure atleastQ computes Atleast(P,A) in time 
linear in the size of the program P. 

Proof. Note that for every atom a, the list a.hlist is traversed at most twice 
and the lists a.plist and a.nlist are traversed at most once. For every rule 
r, the list r.body is traversed at most twice. To be precise, the list a.hlist 
is only traversed in the procedure atleast() when a.inA + or a.inA~ is being 
set and this can only happen once. The same holds for the lists a.plist and 
a.nlist. Moreover, the only other place where the list a.hlist is examined 
is in the function inactivateQ and there too only once, when a.headof is 
decremented to one. 

The list r.body is only traversed in backchaintrueQ and backchainfalseQ. 
These functions are, for each rule, called at most once from the procedure 
atleastQ. The function backchainfalseQ is also called from fire(), but then 
r. head. in A" is true and the list is gone through if r. literal = 1, which only 
happens once. Finally, backchaintrueQ is called from inactivateQ, but only 
once when r .head .headof = 1. □ 

In conclusion, notice how the amount of work performed by the proce- 
dure atleastQ corresponds to the number of literals in Atleast(P, A) — A. 
Specifically, observe that if atleastQ is called in succession with an increas- 
ingly larger set A, then the total amount of work done is still linear in the 
size of P. 

4.2 At Most 

The deductive closure Atmost(P, A) can be computed in a style similar to 
that of Atleast(P, A). However, since Atmost(P, A) diminishes as A grows, 
one would then have to compute it from scratch each time A changes. If 
Atmost(P, A) is large and if it changes only a little, then we would be doing 
a lot of extra work if we computed it anew. 

We will try to localize the computation by using the basic Dowling- 
Gallier algorithm in two stages. Assume that we have computed the deduc- 
tive closure Atmost(P, A) and that we want to compute Atmost(P, A) for 
a set A D A. We begin by calculating a set B C Atmost(P, A) with the 
help of a version of the basic Dowling-Gallier algorithm. Instead of deriving 
new atoms, this version removes them. After this stage we apply the basic 
algorithm to incrementally compute Atmost(P, A) from B. 

The first stage removes atoms from the closure Atmost (P, A) in the fol- 
lowing way. If it notices that a rule can no longer be used to derive the 
atom or atoms in the head of the rule, then it removes the atom or atoms 
from the closure. The removal may lead to the inactivation of more rules 
and subsequent removals of more atoms. Since there can be rules that still 
imply the inclusion of an atom in Atmost(P, A) after the atom has been 
removed, the first stage might remove too many atoms. We therefore need 
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the second stage to add them back. Sufficiently many atoms are removed by 
the first stage, as an atom that is not removed is the head of a rule that is 
not inactive. The atoms in the body of this rule are in the same way heads 
of other rules that are not inactive, and this succession continues until one 
reaches rules that imply the inclusion of their heads even if the closure were 
empty. 

The two stages need a new counter for every rule. We call this counter 
upper, since it is used to compute the upper closure that approximates stable 
models from above. In addition, each atom a has a Boolean flag a.inllpper 
that is true if a is a member of the upper closure. The procedure that com- 
putes Atmost(P, A) is described in Algorithm 11. The main work happens in 
the three functions propagateFalseQ, propagateTrueQ, and isUpperActiveQ, 
corresponding to decrementing the counter, incrementing the counter, and 
testing if the rule can be used to derive its head or heads, respectively. The 
functions for the basic rules are given in Algorithm 12. The functions for 
the other types are in Appendix C. 

We assume that the queue queue is implemented such that pushing an 
atom onto the end of it does nothing if the atom is already on the queue. 
The inactive counters are used by the auxiliary functions and the inA~ flag 
is used by the main procedure. For a rule r, r.inactive > if 

max' r (A)= U fr(C,C) 
A+CC 

is the empty set, and for an atom a, a.inA~ is true if a E A~ . In addition, 
we assume that the flag a.inllpper is set to false whenever a.inA~ is true. 

The first and largest upper closure, Atmost(P, 0), can be computed by 
the second stage if the queue is initialized with the atoms that follow imme- 
diately from some rules. These are the atoms in 

reP 

The problem that remains is initializing the queue such that the first 
stage removes sufficiently many atoms from Atmost(P, A). We must ini- 
tialize the queue with the atoms in the heads of the rules that potentially 
become inactive when A changes to A'. Recall that Atmost(P, A) is the 
least fixed point of the operator 

f'(B)= {Jf>(A+,B-A-)-A-. 

reP 

For A C A', C = Atmost(P, A) and for every basic or choice rule r we 
initialize the queue with the atoms in 

f' r {A+, C - A-) - fUA' + , C - A'~) - A 1 '. 
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procedure atmostQ 
F := 

while queue is not empty do 
a := queue. pop () 
if a.inUpper = true then 
for each rule r £ a.plist do 

r. propagateFal.se () 
end for 

a.inUpper : = false 
F:=FU{a} 
end if 
end while 

for each atom a £ F do 
for each rule r € a. Mist do 
if r.isUpperActiveQ then 

queue. push(a) 
end if 
end for 
end for 

while guetie is not empty do 
a := queue. pop() 

if a.inUpper = false and a.inA~ = false then 
for each rule r G a.plist do 

r.propagateTrue () 
end for 

a.inUpper := true 
end if 
end while. 

Algorithm 11: The implementation of Atmost(P, A) 

For every cardinality and weight rule r we initialize the queue with the atoms 
in 

f r {A + ,C-A-)-f' r {A' + ,%)-A ! -. 

The reason behind the more lax condition for cardinality and weight rules 
is best illustrated by an example. 

Example 4.2. Let P be the program consisting of the rule r 

a <— 1 {a, not b). 

Then, C = Atmost(P, 0) = {a} and Atmost(P, {b}) = 0. However, 
/;({6} + , C - {&}-) - {6}- = /;«&}, {a}) = {a}. 
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function r.propagateFalseQ 
r. upper := r. upper + 1 
if r. upper = 1 and r. inactive = then 

queue. push(r. head) 
end if. 

function r. propagate True () 
r. upper := r. upper — 1 
if r. upper = and r. inactive = then 

queue. push(r. head) 
end if. 

function r. is Upper ActiveQ 

if r. upper = and r. inactive = then 

return true 
else 

return false 
end if. 

Algorithm 12: Auxiliary functions for the basic rules 

Hence, for A = and for A' = {&}, 

/;(A+ C-A-)- K(A >+ , C - A'~) - A'~ = 

and we miss an inactive rule if we assume that the atoms in C remain in 
the closure. 

Example 4.3. An illustration of the two stages of atmostQ is shown in 
Figure 4. The program P 

b <— a c <— a, not f 

b <— c c <— d 

d <— 6 e <— d 

a <— 

is displayed as a graph whose nodes are the atoms and whose edges are the 
rules that partake in the computation. The initial state is shown in 4(a) and 
corresponds to Atmost(P, 0) = {a, b, c, <i, e}. In 4(b) the atom / is added 
to A = and the rule c <— a, not f becomes inactive. The first stage then 
removes the atoms c, b, d, and e. The second stage notices that b still follows 
from b <— a and adds the atoms b, d, e, and c back into the closure. The 
end result Atmost(P, {/}) = {a, 6, c, d, e} is shown in 4(c). 

Proposition 4.4. The procedure atmostQ computes Atmost(P, A) in time 
linear in the size of the program P. 

Proof. Note that for every atom a, the list a.plist is traversed at most twice 
and the lists a.hlist is traversed at most once. □ 
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b <— a 
b' 



d^b 



c <— a, not f 

-c 
c <— d 
d 




(a) A = 0, all atoms are in 
the closure 



(b) A = {/}, the 
first stage removes 
all atoms but a 



(c) The second stage 
adds the atoms back 



Figure 4: A visualization of the computation of Atmost(P, A) 



4.3 Various Optimizations 

It is possible to optimize the smodels algorithm in various ways. For ex- 
ample, if the algorithm has deduced that an atom can not be part of any 
model, then one can remove the atom from the bodies of the rules in which 
it appears. The bodies shorten and any following traversal of them is faster. 
Similarly, an inactive rule can safely be removed from the lists of the atoms. 
A reduction of this type leads only to a small performance improvement. 
Hence, reducing a program by removing rules and atoms is best done just 
before the heuristic is computed for the first time, as one then need not undo 
the changes later. 

The heuristic can in principle return any atom in Atoms(P) for a pro- 
gram P. Since smodels (P, A) calls itself twice for every choice point that 
the heuristic finds, the algorithm explores at worst a search space of size 
2\Atoms(P)\_ Restricting the choice points to a smaller set could substantially 
improve the algorithm. 

The procedure atmostQ will in the worst case remove all atoms from 
the upper closure before adding them back again. If we could localize the 
computation of atmostQ to small parts of the program, then we could avoid 
the worst case. 

Below, we identify the choice points that can be ignored and present two 
methods for localizing the computation of Atmost (P, A). 



Reducing the Search Space 

Fix a program P. Let B be the set of atoms that appear as not-atoms in 
the bodies of the rules in P or in the heads of the choice rules in P. Then, 
for any rule r G P and for any sets of atoms S, C C Atoms (P), 

f r (snB,c) = f r (s,c) 
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by the definition of f r . Hence, there is a one-to-one correspondence between 
the stable models and their intersections with B. In other words, we do not 
have to consider choice points that are not in B. 

The program P defines a directed graph G = (V, E) where the vertices 
is the set V = Atoms (P) U P and where the edges is the set 

E = {(r, a) | a G r.head} U {(a, r) \ a G r.body + or a £ r.body~}. 

We say that the atom a appears as a not-atom in a cycle in the graph if the 
edge (a,r) is part of the cycle and a G r.body+. 
Let 

Pa = { r \ there is a directed path from r to a in G}. 

If a does not appear as a not-atom in a cycle and if a does not appear in 
the head of a choice rule, then gp a (S) = gp a (S — {a}) for all S. Since 

g Pa (S)^gp(S) 

and since a € gp(S) implies a € gp a (S) for any S, a £ S = gp(S) for a stable 
model S 1 if and only if a G gp a (S). Thus, the choice points can be restricted 
to the set Atoms(P) — {a}. Furthermore, we can combine all restrictions as 
Pa C Pb if there is a path from a to b. Therefore, the set of choice points 
B can be taken to be the atoms that appear as not-atoms in some cycles or 
that appear in the heads of some choice rules. 

Proposition 4.5. Let P be a program, let B be the set of atoms that appear 
as not-atoms in some cycles or that appear in the heads of some choice rules. 
Let S and S' be stable models of P. Lf S D B = S' D B , then S = S' . 

Proof. Let B be the set of atoms that appear as not-atoms in some cycles 
or that appear in the heads of some choice rules of P. Define Bq = B and 

B i+ i = BiU {a G Atoms(P) - Bi \ for every b G Atoms(P) - B i} 

if there is a path from 6 to a, then there is a path from a to b}. 

If a G Bi + i — Bi, then a does not appear in the head of a choice rule nor 
does it appear as a not-atom in 

p m = u p b . 

Hence, 

g Pi+1 (S n Bi) = g Pi+1 (S n B i+1 ) 

for any S. Now, for any a G B,i + \ — Bi and for any 5, a G gp(S) if and only 
if a G gp i+1 (S). 
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Let S and S' be two stable models of P for which SdBi = S'P\E>i holds. 
If a G Bi + \ — Bi, then a G S = gp(S) implies 

a G g Pz+1 (S) = g Pz+1 {S n B i+1 ) = g Pi+1 {S n B*) = 5Pi+1 (5' n B*) 

= 5Pi+1 (^ n B i+1 ) = g Pl+1 (S') C = 5'. 

Thus, 5 n Bj+i = S" n B i+ i by symmetry. Consequently, 5 n B = S' D B 
implies S = S' . □ 

We need a stronger result than that the stable model semantics makes 
the atoms in the set B define the stable models. We want smodels to stop 
searching as soon as B is covered. This holds if we use both Atmost(P, A) 
and Atleast(P, A) in expand. 

Proposition 4.6. Let P be a program, let B be the set of atoms that appear 
as not-atoms in some cycles or that appear in the heads of some choice rules 
of P. Let Abe a set of literals such that Atoms(A) = B. Then, expand(P, A) 
covers Atoms(P). 

Proof. Let C = expand(P, A). Assume that Atoms{C) C Atoms {P). Then, 
there exists an atom a G Atmost(P, C) — C + and a rule r G P that is not a 
choice rule such that 

a G /;(C+, C+ - C~) -C- = f r (C + , C + ). 

Since otherwise f' r {C + ,C+ - C~) - C~ C C+, f{C+) C C+ and conse- 
quently Atmost(P,C) C C + by Lemma A.l. 

As the atoms in Atoms(P) — Atoms(C) can not appear as not-atoms in 
the body of r, 

/ r (C+,C + ) = / r (C",C+) 

for C + C C and C~ n C = 0. Hence, / r (C+,C+) = min r (C) since / r is 
monotonic in its second argument. But then, 

a G Atleast{P,C) C C 

which is a contradiction. Thus, (7 covers Atoms(P). □ 

It is easy to make the smodels algorithm ignore choice points. We just 
change the cost function of the heuristic. Recall that the heuristic searches 
for the literal x that minimizes 2~ p + 2~ n for p = \A P — A\ and n = \A n — A\, 
where 

A p = expand(P, A U {x}) and A n = expand^P, A U {not (x)}) . 
To limit the relevant choice points to B we simply redefine p and n as 
p = \(A P - A) D B\ and n = \(A n - A) n B\. 
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Notice that we do not really restrict the choice points to B. Instead, 
we guarantee that if smodels branches on a choice point, then at least one 
literal in B will follow when we prune the search space. Thus, we retain 
the greatest possible freedom in choosing choice points and we can still be 
certain that the size of the search space stays below 2l B L 

Example 4.7. Let P be the program 

a <— not b b <— c 

c <— not a d <— not c. 

Since d does not appear as a not-atom in the program, it is not a choice 
point. Since c does not appear as a not-atom in a cycle, it is not a choice 
point either. Thus, the set of choice points of P are B = {a, b}. 

Strongly Connected Components 

Consider the computation of Atmost(P, A') that starts from Atmost(P, A). 
The function atmostQ operates on the graph G = (V,E) given by V = 
Atoms(P) and 

E = {(a, b) | there is a rule r such that a £ r.body + and b € r.head}. 

Take an atom a G Atmost(P, A). Observe that the only atoms that deter- 
mine whether a is removed from the upper closure during the first stage 
of atmostQ are the atoms that have a directed path to a in G. Hence, we 
can localize atmostQ by computing both stages inside a strongly connected 
component of G before moving on to the rest of the graph. A strongly con- 
nected component of a directed graph is a set of vertices such that there is 
a directed path from any vertex in the component to any other. 

In practice, this is done by removing rules from the list a.plist for every 
atom a. Specifically, if r € a.plist and if r.head is not in the same strongly 
connected component as a, then we remove r from a.plist. Here we assume 
that atmostQ and atleastQ use their own versions of a.plist. 

One atmostQ invocation will only compute a superset of the new upper 
closure after this change. If the atom a is removed, then we know that 
a.inA~ can be set to true. Setting a.inA~ to true in turn, influences the 
inactive counters of some rules. Therefore, we can possibly initialize the 
queue with some atoms. If we call atmostQ every time we initialize the queue 
with new atoms, we eventually remove everything not in Atmost(P, A'). 

Notice that we do not explicitly keep track of the strongly connected 
components nor the acyclic graph they induce. Hence, the components are 
not processed in any fixed order even if the order given by the acyclic graph 
would be favorable. Changing the queue in atmostQ into a priority queue 
would solve this problem. Also notice that if there are no strongly connected 
components, then we need not compute atmostQ. 
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d <— a 

d <— c a b a b 




(a) Original program (b) Original program (c) The strongly con- 
as a graph nected components 

Figure 5: Localizing Atmost(P, A) with strongly connected components 

Example 4.8. A partial program is shown in Figure 5(a). The correspond- 
ing graph is shown in Figure 5(b). If we assume that a and b are in the upper 
closure then the upper closure is the set {a, b, c, d, e, f, g, h}. If we remove a, 
then the first stage of atmostQ removes all atoms except b and the second 
stage adds them back. 

Removing the rules that leave a strongly connected component results 
in the graph in Figure 5(c). The first stage of atmostQ now removes only 
the atoms c, d, and e. 

The Source Pointer 

Partitioning a program into strongly connected components localizes the 
upper closure computation to a component if the component remains in the 
upper closure. If the component is removed, then the computation spreads 
to other components, perhaps in vain. 

We can partly overcome this problem with the help of the following 
construct. For every atom a, we create a source pointer a. source whose 
mission is to point to the first rule that causes a to be included in the 
upper closure. During the first stage of atmostQ, it suffices to only remove 
atoms which are to be removed due to a rule in a source pointer. For if the 
rule in a source pointer does not justify the removal of an atom, then the 
atom is reentered into the closure in the second stage of the computation. 
The source pointer is implemented by modifying the auxiliary functions 
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function r.propagateFalseQ 
r. upper := r. upper + 1 
if r. upper = 1 and r. inactive = and 

(r. head. source = or r. head. source = r) then 

r. head. source := 

queue. push(r. head) 
end if. 

function r.propagateTrue() 
r. upper := r. upper — 1 
if r. upper = and r. inactive = then 
if r. head. source = then 

r. head. source := r 
end if 

queue. push(r. head) 
end if. 

Algorithm 13: Auxiliary functions and the source pointer 

propagateFalseQ and propagateTrueQ as can be seen in Algorithm 13. 
Example 4.9. Let P be the program 

b <— not a b <— d 

c <— b d <— e 

e <— c e <— no£ /. 

Three pictures illustrating the source pointers and the two stages of atmosti) 
are shown in Figure 6. The initial state is shown in 6(a) and corresponds 
to Atmost(P,$) = {b, c, d, e}. In 6(b) the atom a is added to A = and 
the rule b <— not a becomes inactive. The first stage then removes the atom 
b, as b. source points at the rule b <— not a, and the atom c, as c. source 
points at c <— b. The second stage notices that b still follows from b <— d 
and adds the atoms b and c back into the closure. The source pointer 
b. source is at the same time updated to point at b *— d. The end result 
Atmost(P, {a}) = {b, c, d, e} is shown in 6(c). 

4.4 Backtracking 

The smodels (P, A) procedure employs chronological backtracking. The last 
literal that is included in a partial stable model is the first that is removed 
when a conflict is detected. Since we want a linear-space implementation of 
smodels (P, A) , we can not store snapshots of the states of the data struc- 
tures. We must instead store the changes that take place. 
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a a a 




f f f 

(a) A = 0, all atoms (b) A = {a}, the first (c) The second stage 
are in the closure stage removes b and c adds the atoms back 



Figure 6: Localizing Atmost(P, A) with source pointers 

It is enough to keep track of the changes to the set A. For example, if 
the atom a is added to A, i.e., if the flag a.inA + is set to true, then for every 
basic rule r in a.plist the counter r. literal is decremented by one. Hence, if 
a is removed from A, then r. literal should be incremented. Generally, the 
value of every counter is completely determined from its previous value, and 
the previous value is completely determined by its new value. Hence, if we 
during backtracking undo the changes to A in the opposite order to which 
they took place, then we can directly compute the old values of the counters. 

Consequently, backtracking can be implemented with the help of a stack 
of size Atoms(P). Every time a literal is added to A it is also pushed onto 
the stack. We backtrack by popping literals off the stack and by computing 
the correct values for the relevant counters. 

Backjumping 

Lookahead guarantees that conflicts are caused by the chronologically next 
to last choice. Assume that the literal x\ is the next to last choice, as 
given by the heuristic. Furthermore, assume that conflict (P, A) returns 
false for A = expand(P, A U {xi}), but that the choice of x\ does not affect 
the conflict that arises when the literal X2 is added to A. That is to say, 
conflict (P, A") returns true for A" = expand {P, A\J {a^})- Since lookahead 
examines all possible ways of adding a literal to A, it notices this conflict 
before x\ is chosen. Hence, the literal x\ is not the next to last choice, and 
by the same argument, neither is any other literal not related to the conflict. 

Despite the fact that many conflicts are discovered by the lookahead 
function, there are still situations where the decision procedure exhaustively 
searches through assignments that are not relevant to a set of conflicts. A 
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simple example is given by the union of two programs that do not share 
atoms. We assume that the first program has several stable models and 
that the second one has none. If we always begin by trying atoms from 
the first program, then we will search through all stable models of the first 
program before we discover that the joint program has no stable models. 

The excessive backtracking in the preceding example is caused by the 
fact that smodels (P, A) does not notice that the conflicts in one subprogram 
are independent from the truth-assignments in the other. Fortunately, it is 
easy to improve smodels. 

Let independent (P, A, x±, X2) be a function whose arguments are a pro- 
gram P, a set of literals A, and two literals x\ and X2- Let 

A\ = expand(P, A U {si}), 
A2 = expand(P, A U {X2}), 

and 

A ?) = expand(P, A U {x\, £2})- 
We assume that independent fulfills the two conditions 

11 if independent (P, A, x±, X2) returns true, if conflict (P, A2) returns false, 

and if conflict (P, A3) returns true, then conflict (P, A\) returns true, 
and 

12 if independent (P, A, x 1, x 2) returns true and if A is a subset of A', then 

independent (P, A' , x±, X2) returns true. 

We say that x\ is independent from X2 if independent (P, A, x±, X2) returns 
true. 

If x\ is independent from X2, if X2 is just before x\ on the stack, and if x\ 
gives rise to a conflict, then one can remove both x\ and X2 from the stack 
before pushing not (x\) onto it without loosing any stable models. Thus, we 
can skip some literals while backtracking. We call this backjumping. 

Consider the generalized smodels procedure that only accepts a stable 
model for which stable(P,A) returns true. Since we can backtrack from a 
stable model and since we have to guarantee the completeness of the deci- 
sion procedure, we have to distinguish between two modes of backtracking. 
Specifically, backtracking from a stable model must be chronological while 
backtracking from a conflict may take advantage of backjumping. 

A decision procedure that incorporates backjumping is presented in Al- 
gorithm 14. The algorithm assumes the existence of two global variables: 
conflict and top. The variable conflict holds the last choice leading up to a 
conflict, while the variable top keeps the level, or depth of recursion, above 
which backtracking is chronological. 
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function smodels(P, A, level) 
A := expand(P, A) 
A := lookahead(P,A) 
if conflict(P, A) then 

return false 
else if A covers Atoms(P) then 
top := level 

return stable(P, A) {A + is a stable model} 
else 

x := heuristic(P, A) 
conflict := x 

if smodels(P, A U {x}, level + 1) then 
return true 

else if level > top and independent (P, A, conflict, x) then 

return false 
else 

if level < top then 

top := level 
end if 

return smodels (P, A U {not (x)}, level + l) 
end if 
end if. 

Algorithm 14: Incorporating backjumping 
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The soundness of smodels is obviously not affected by backjumping since 
backjumping only prevents the algorithm from exploring certain parts of the 
search space. Completeness, on the other hand, must be proved. 

Theorem 4.10. Let P be a set of rules and let A be a set of literals. If there 
is a stable model S of P agreeing with A such that stable{P, S') returns true 
for S' = S U not (Atoms (P) — S), then smodels(P, B, top) returns true. 

Proof. We show that completeness is not lost when backjumping is intro- 
duced. Since backtracking is chronological, and therefore exhaustive, for 
a depth of recursion smaller than top, we only have to consider the case 
level > top. 

Assume that there is no stable model agreeing with A U {xo} and that 
when smodels(P, A U {xo}, level + 1) returns false, 

independent (P, A, conflict, xo) 

returns true. Furthermore, assume that 5" is a stable model agreeing with 
the set A U {not (xo), x\, . . . , x n } and that the set covers Atoms (P). Then, 
conflict (P, A') returns true for 

A' = expand(P, A U {xo, x\, . . . , x n }), 

since there is no stable model agreeing with A'. Take i such that conflict = Xi 
or conflict = not (xj), and let j be the smallest number for which 

conflict (P, expand(P, A U {xj, xq, xi, . . . , Xj})) 

returns true and conflict (P, expand(P, A U {xo,xi, . . . ,Xj})) returns false. 
Then, conflict (P, expand (P, A U {xj,xi, ... ,xj})) returns true by II, 12, 
and El. Hence, by C2 there is no stable model that agrees with A U 
{not (xo), xi, . . . , x n } and this contradicts the existence of S. Thus, there is 
no stable model agreeing with A U {not (xo)}- 

We complete the proof by induction on the size of 

nc(P, A U {x}) = Atoms(P) - Atoms(A U {x}). 

If A U {x} covers Atoms (P), if the function smodels(P, A U {x}, level + 1) 
returns false and if level > top, then there is no stable model agreeing with 
Au{x}. Let nc(P, Au{x}) ^ 0, let smodels (P, Au{x}, level + 1) return false 
and let level > top. Then, smodels{P, A' U {x'}, level + 2) returns false for 
A' = expand (P, ^4u{x}) and x' £ nc(P, A'), and by induction there is no sta- 
ble model agreeing with A' U {x'}. If independent (P, A', conflict, x') returns 
true, then by the above there is no stable model agreeing with A'U{not (x')} 
either. If, on the other hand, independent (P, A' , conflict, x') returns false, 
then smodels (P, A' U {not (x')}, level + 2) returns false and there is again by 
induction no stable model that agrees with A 1 U {not (x')}. Therefore, there 
is no stable model that agrees with A U {x}. □ 
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Let the undirected graph G = (V, E) of a program P be defined by 
V = Atoms(P) and 

E = {(a, b) \a,be r.head U r.body + U r.body~ for some r € P}. 

A simple but easy to compute instance of independent (P, A, x±, X2) returns 
true exactly when there is no path in G between the atoms that X\ and X2 
cover. Since expand can not propagate any truth values via any inactive 
rules, we can safely remove these rules from G. Similarly, any atom in A~ 
can also be removed. However, we must not remove any atoms in A + , as 
atmostQ examines them during its computation. An example of what can go 
wrong if the atoms in A + are removed from G is given in the next example. 

Example 4.11. Let P be the program 

a <— b b <— a 

a <— c b <— d, not d 

{c} «- {d} - 

and let A = {a, b}. If we remove the literals in A + from the graph, then 
d and c are not connected. Hence, by first choosing not c and then not d 
we get a conflict, and when we try d we get another conflict. Since d is 
not connected to c, we backjump past c thereby missing the stable models 
{a, b, c} and {a, b, c, d}. 
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5 Complexity 



The smodels procedure solves an NP-complete problem. It returns true if 
and only if a program has a stable model. By Proposition 3.8, we can test 
whether a set of atoms is a stable model in polynomial time. 

Theorem 5.1. Deciding whether a set of basic, choice, cardinality, and 
weight rules has a stable model is NP-complete. 

Unsurprisingly, the smodels procedure has a worst-case time complexity 
that is exponential in the number of atoms of a program. The interesting 
thing about exponential computations is that one can make them faster 
asymptotically by trading an arbitrary amount of polynomial work for a 
tiny reduction of the exponent. For instance, for any k 

for large n. 

We get exponential behavior from smodels if we try to solve the pigeon- 
hole problem. This is the problem of trying to stuff n pigeons into k holes 
such that there is at most one pigeon per hole. Clearly, there is no solution 
if n > k. Let the atom pij be true when pigeon number i is in hole number 
j. Then, the pigeon-hole problem is encoded by the program P 

{Pi,i, ■ ■ ■ ,Pi,k} <- 



false <- 


-2{R,i,.. 


• ,Pi,k} 


false <- 


- not p itl , . 


...not p itk 


false *■ 


-2{pij,.. 


• iPn,j} 



compute {not false} 

for 1 < i < n and 1 < j < k. 

Let A be a set of literals having not false as a member. Since the program 
does not contain any positive loops, expand(P, A) = Atleast(P, A). We will 
examine the behavior of Atleast(P, A). Notice that if pij <G A, then 

not pij, . . . , not Pi-ij, not Pi+ij, ■ ■ ■ , not p n j £ Atleast(P, A) 

and 

not p it i, ...,not Pij-i, not Pij+i, ...,not p i<k <E Atleast(P, A). 

Furthermore, if 

not p itl , . .. ,not Pi,j-i, not Pij+i, . .. ,not p i;k G A, 

then pij G Atleast(P, A), and there is no other way of deducing additional 
literals in Atleast(P, A). 
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Denote by P k the encoding of the pigeon-hole problem when n = k + 
1 > 3. Then, smodels{Ph,%) will call itself recursively at least 2 k ~ 2 times. 
By inspection, we see that smodels(Pk, {Pi,j}) and smodels(Pf ( ., {not Pij}) 
are called for some i and j when k = 3. For the inductive case notice 
that if A n {p± t k, ■ ■ ■ ,Pn,k} = 0) then Atleast(Pk, A U {p n ,k}) is equal to 
Atleast(Pk—i, A) modulo all atoms that handle pigeon n and hole k. Fur- 
thermore, under the same assumption lookahead(Pk, A U {not p n ,k\) does 
not find any conflicts if lookahead(Pk-i, A) does not. In addition, one can 
take any atom pij instead of p n ^ as we can freely rename atoms. Since 
Atleast(P k , A) C Atleast(P k -i,A) for any A for which A = Atleast(P k -i, A), 
it immediately follows that if smodels(Pk-i, 0) calls itself recursively at least 
2(fc-i)-2 ti meS) then smodels(Pk, 0) calls itself recursively at least 2 h ~ 2 times. 

Since smodels (P, A) solves an NP-complete problem it can also solve 
coNP-complete problems. In fact, since it can go through all stable models 
of a logic program, it can solve Ag-complete problems such as deciding the 
lexicographically largest stable model. 

Proposition 5.2. Let L = {P \ P has a stable model and the lexico- 
graphically largest one contains the least significant atom}. Then, L is In- 
complete. 

Proof. Given P we can check whether P G L using the oracle 

O = { (P, A) | there exist a stable model of P that agrees with A} 

a linear number of time. Namely, the language L is decided by the func- 
tion 

function isinL(P) 
A = 

for each atom a in Atoms(P) in order, most significant first do 
if there exists a stable model of P that agrees with A U {a} then 

A := Al){a} 
else 

A := A U {not a} 
end if 
end for 

if the least significant atom is in A then 

return true 
else 

return false 
end if. 

Hence, L G Ag. Deciding the least significant atom of the lexicographically 
largest satisfying assignment of a Boolean formula is A^-complete [27]. Thus, 
L is also A^-complete. □ 
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5.1 Function Problem Complexity 

As noted in [49] any optimization problem, whose decision version is in NP, 
is in FP NP . Hence, finding an optimal stable model of a logic program is in 
FP NP . In fact, finding an optimal stable model is FP NP -complete. 

Theorem 5.3. Let P be a program containing at least one minimize state- 
ment. Let <p order the stable models of P according to the minimize state- 
ments in P. Then, the problem Opt: given a logic program P, find a stable 
model S of P such that for any other stable model S' of P, S <p S' , is 
FP NP -complete. 

Proof. We begin by showing that the problem is in FP NP . Assume without 
loss of generality that all weights are positive. If m is the minimize statement 

minimize {m = w ai , ■ ■ ■ , a n = w an , not h = w bl , . . . , not b m = w bm }, 

then define 

n m 

w(m) = w ai + ^2 w bi- 

i=i i=i 

Furthermore, if S is a set of atoms, then define 

w(S, m) = Wa t + W bi ■ 

a,eS bi<£S 

Since the oracle 

O = {{P, S, k) | there exists a stable model S of P 

that agrees with A such that w(S, m) < k} 

is in NP, the procedure findOptimal(P) in Algorithm 15 shows that the 
problem of finding an optimal stable model of a logic program is in FP NP . 
The procedure begins with a binary search for the weight of the optimal 
model. It then constructs the model using a linear number of oracle calls. 

We prove that the problem is FP NP -hard by noticing that the problem 
Max- weight Sat can be reduced to Opt. If we are given a set of clauses, 
each with an integer weight, then Max- weight Sat is the problem of find- 
ing the truth assignment that satisfies a set of clauses with the greatest total 
weight. The problem Max- weight Sat is FP NP -complete [49]. 

For each clause c = ai V • • • V a n V — >6i V • • • V ~^b m with weight w c , create 
the rule 

c <— not ai, . . . , not a n , b±,..., b m . 
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For each atom a that appears in a clause create the rule {a} <— . Finally, 
add the maximize statement 

maximize {not c = w c , . . .}. 

The maximal stable model of this program is the truth assignment of greatest 
total weight. □ 

We note that if a logic program contains one minimize statement, then 
we can determine the weight of the lightest stable model using a logarithmic 
number of oracle calls. 
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function findOptimal(P) 
A = % 

if there is no stable model of P then 

return false 
end if 

for each minimize statement m in P in order, most significant first do 
u := w(m) 
I : = 

while kudo 

if there exists a stable model S of P that agrees with A such that 
w(S,m) < |_(u + 0/2j then 

u:=[(u + l)/2\ 
else 

I : = L(« + 0/2j +1 
end if 
end while 

for each literal x in m do 

if there exists a stable model S of P that agrees with A U {x} such 
that w(S,m) = I then 

A := Au{x} 
else 

A := AU {not (x)} 
end if 
end for 
end for 

for each atom a in Atoms(P) — Atoms(A) do 

if there exists a stable model of P that agrees with A U {a} then 

A := Au{a} 
else 

A:= AU {not a} 
end if 
end for 

return A + . 

Algorithm 15: Proof that finding an optimal stable model is in FP NP 
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6 Comparison with other Algorithms 



We compare the smodels algorithm with the Davis-Putnam procedure and 
with some algorithms for computing stable models of logic programs. We 
begin with the Davis-Putnam procedure. 

6.1 The Davis-Putnam Procedure 

The Davis-Putnam (-Logemann-Loveland) procedure [10] for determining 
the satisfiability of propositional formulas in conjunctive normal form has 
several similarities to the smodels algorithm. We compare the two methods 
and highlight their differences. 

The main difference between the methods comes from the different se- 
mantics of the underlying problem. The stable model semantics requires 
that a model is grounded. Hence, the program 

a <— a 

has only one stable model, the empty set, while the corresponding proposi- 
tional formula 

has two models: {a} and the empty set. All other dissimilarities are the 
result of this fundamental disparity. 

The Davis-Putnam procedure can prune its search space in three ways: 
by the subsumption of clauses, by using the pure literal rule, and by unit 
propagation. 

If all truth-assignments that satisfy a clause c also satisfy another clause 
c', then c subsumes d . For instance, a V b subsumes a V b V ->c. Subsumed 
clauses can therefore be removed from a formula without changing the set 
of models of the formula. The smodels algorithm has presently no corre- 
sponding way of pruning the search space. However, testing for subsumed 
clauses is expensive and state-of-the-art satisfiability checkers only perform 
subsumption in a preprocessing step. 

The pure literal rule removes any clauses containing a literal whose com- 
plement do not appear in any clause. This corresponds to setting the literal 
to true in a truth- assignment. For example, as the literal ->a does not appear 
in the formula 

(aV6) A(flVnc), 

the pure literal rule makes a true and removes both clauses yielding the 
model {a}. Hence, the pure literal rule can discard models, and in this 
case it discards the models {&}, {a, b}, and {a,b,c}. Since smodels does not 
discard models, it does not make use of any similar rule. Apart from this, it 
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is not clear what form a rule that does not preserve all models would have 
under the stable model semantics. The presence of maximize and minimize 
statements further complicates matters. 

Unit propagation consists of unit resolution and unit subsumption. Unit 
resolution removes all literals that are false from every clause and unit sub- 
sumption removes all clauses that contain a literal that is true. Since a unit 
is a clause of length one, it defines the truth value of a literal and this is 
the reason for the name. In smodels unit propagation coincides with for- 
ward propagation and with backward propagation of rules with false heads. 
Making heads without active rules false and propagating rules with true 
heads backwards have no correspondence in the Davis-Putnam procedure. 
Similarly, the upper closure is unique to smodels. 

Lookahead is in part used by modern satisfiability checkers. They typi- 
cally only employ lookahead on a small subset of all possible atoms and they 
do not avoid testing literals that follow from lookahead tests of other literals. 
Their heuristics take advantage of the lookahead that they do perform, but 
not in the search space minimizing form of smodels. 

6.2 Stable Model Algorithms 

We make a comparison of the smodels algorithm and some other algorithms 
for computing the stable model semantics. In order to facilitate the compari- 
son we must first examine the well-founded semantics [65] . We then examine 
the branch and bound algorithm of [63], the SLG system of [7], the mixed 
integer programming methods of [2], the modified Davis-Putnam method 
of [12], and the dlv system of [18]. Finally, we end with a comparison with 
smodels. 

The Well-founded Semantics 

Since the definition of the well-founded semantics [65] is somewhat compli- 
cated, we make use of an equivalent definition that suits our needs better. 



for any normal logic program P and any set of atoms A. Then, the operator 
Tp(A) is anti-monotonic and we can define the well-founded semantics with 
the help of the least and greatest fixed points (Ifp (•) and gfp (•)) of the 
monotonic operator 



Let 




T P (A) = T P (T P (A)). 



Notice that 



T P (A) = Atmost{P,A). 
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According to [1], the well-founded model W of a program P is denned as 
follows: 



Proposition 6.1. IfW is the well-founded model of the normal logic pro- 
gram P, then W C expand (P, 0). 

Proof. Let B = expand(P,%). Then, 

Atoms(P) - B~ = Atmost{P,B) C Atmost(P, B + ). 
Consequently, 



As P~nC = implies (7 C Atoms (P)-B~ (we can assume C C ylforos(P)), 



W+ = lfp(T 2 P ) 

W~ = Atoms(P) - gfp{Tp). 



Tp(B + ) = T P (Atmost(P,B + )) 
C Tp(Atmost(P,B)) 
= Tp(Atoms{P) - B~). 



In addition, Atleast(P, B) = B implies 



mm 



r (B)= p| / r (C,C)CB+. 



B+CC 

B-nc=9 



f r (Atoms(P)-B-,C) Cf r (C,C), 



and as P + C C, 



f r (Atoms(P) - B-,B + ) C f r (C,C). 



It follows that 



/ r (Afoms(P) -B~,B + ) C min r {B) C B+. 



Hence 



J fr(Atoms(P) - B-,B + ) C P 



■+ 



and therefore 
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Thus, 

T P (Atoms(P) - B~) = Atmost(P, Atoms(P) - B~) C B + , 
Ip(£ + ) C J3+, 

and 

lJp(T 2 P ) C 5+. 

Let 4 = Z/p(I$). Then, 

r^(rp(A))=rp(r^))=r P (A). 

Hence, rp(A) is a fixed point of Fp and 

r P (A) C gfp(T 2 P ). 

Now, 

,4toms(P) - fl/p(Ip) C Atoms(P) - T P (A) C Atoms(P) - r P (B+) C £ _ 

as Atoms(P) — B~ C Tp(i? + ) and we have proved that the well-founded 
model of P is a subset of B. □ 

In fact, the well-founded model W = expand(P, 0) [57]. Notice that since 
expand(P, A) can return a conflicting set of literals if A ^ 0, it provides a 
stronger pruning technique than the well-founded semantics. For example, 
consider the program 

P = {a <— b, b <— no£ c, c <— no£ d, d <— not b} 

and make the assumption that we are looking for a stable model containing 
the atom a. A typical reduction of P with respect to {a} would not change 
P, and an application of the well-founded semantics produces the empty set, 
but not the fact that there are no stable models containing a. The function 
call expand(P, {a}) on the other hand returns a set containing both a and 
not a, thereby explicitly showing that there are no models that include a. 

Branch and Bound 

The branch and bound algorithm of [63] computes the stable models of a 
ground logic program in two stages. In the first stage the logic program is 
simplified while the algorithm computes the well-founded semantics of the 
program. In the second stage, the branch and bound stage, all stable models 
of the logic program are constructed. 

Starting with the simplified program the algorithm computes all stable 
models by generating smaller and smaller programs from the programs it 
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has already generated. Two new programs are generated from one program 
by assuming that an atom, whose truth value is unknown according to the 
well-founded semantics, belongs or does not belong to the stable model that 
is being constructed. The search space is pruned by disregarding every 
newly created program that is inconsistent or whose partial stable model is 
a superset of a stable model that has already been found. 

Although the algorithm prunes the search space quite a bit, it must keep 
all constructed stable models as well as all partially constructed stable mod- 
els in memory. This indicates that the algorithm will necessarily perform 
badly if the number of stable or partially constructed models is large. 

The SLG System 

The SLG system [7] supports goal-oriented query evaluation of logic pro- 
grams under the well-founded semantics. It simplifies a logic program dur- 
ing the query evaluation and produces a residual program. If all negated 
literals in the residual program are ground, then the system can compute 
stable models using an assume- and-reduce algorithm. 

The assume-and-reduce algorithm constructs the stable models of a logic 
program in a fashion similar to the branch and bound algorithm. However, 
the assume-and-reduce algorithm differs in that it constructs one model at 
a time, finding all models by backtracking, and in that it does not enlarge a 
partially constructed stable model using the well-founded semantics. Instead 
it derives truth values by repeatedly reducing the program. An atom that 
appears in the head of a rule with an empty body is assumed to be in the 
stable model and an atom that does not appear in any head is assumed to 
not be in the stable model. In addition, the algorithm can with the help of 
backward propagation in some specialized circumstances derive whether an 
atom belongs to the stable model or not. This slightly improves the pruning 
technique. 

The Mixed Integer Programming Approach 

The mixed integer programming methods of [2] computes the stable models 
of a logic program by translating the program into an integer linear pro- 
gram, which is then used to compute all subset minimal models of the logic 
program. The models are subsequently tested by another integer linear pro- 
gram and models that are not stable are removed. As the number of minimal 
models can be very large compared to the number of stable models and as 
the minimal models must be stored, we conclude that this approach is very 
inefficient. 

Since a logic program can be encoded as a satisfiability problem [3] and 
since a satisfiability problem can easily be encoded as an integer linear pro- 
gram, it is possible to compute the stable models of a logic program using 
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only one integer linear program. However, it would hardly be reasonable to 
actually utilize such a complex encoding. 

The Modified Davis-Putnam Method 

In the modified Davis-Putnam method of [12], a logic program is translated 
into a set of clauses in such a way that the propagation rules of the Davis- 
Putnam procedure can deduce as much as the Atleast(P,A) function of 
smodels. In particular, the translation needs a literal for every atom and 
rule in the logic program. 

In addition, the Davis-Putnam procedure is modified such that it only 
branches on literals that correspond to rules of the original program. Fur- 
thermore, the branch points are chosen such that any model that the pro- 
cedure finds is a stable model. 

The DeReS system [8], which implements default logic, is another system 
that branches on rules instead of on atoms. It does not prune its search space 
much. 

The dlv system 

The dlv system of [18] is a knowledge representation system that uses dis- 
junctive logic. When it searches for stable models of normal logic programs, 
it prunes the search space using the propagation rules of the Atleast(P, A) 
function. It is therefore the system that is most similar to smodels. 

Comparison 

We compare the branch and bound algorithm, the SLG system, the mixed 
integer programming approach, the modified Davis-Putnam method, and 
the dlv system with the smodels algorithm. The performance of the branch 
and bound algorithm deteriorates, due to the amount of memory needed, 
when the number of stable models is large. Both the branch and bound 
algorithm and the SLG system prune the search space less effectively than 
smodels. The main difference between smodels without lookahead and the 
branch and bound algorithm and the SLG system is that smodels does not 
differentiate between assumed and derived literals. Hence, smodels auto- 
matically avoids exploring the parts of the search space that the branch and 
bound algorithm avoids by storing all partially constructed stable models 
and that the SLG system does not avoid. 

The mixed integer programming approach computes all minimal models 
of a logic program and then tests if these models are stable. This corresponds 
to a very weak pruning of the search space. For instance, the set of rules 

{cii <— not bi, . . . , a n <— not b n } 

has one stable model but 2™ minimal models. 
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The modified Davis-Putnam method and the dlv system do not prune 
the search space using the upper closure. Hence, they also prune less than 
smodels. It would be quite easy to integrate the upper closure computation 
into the dlv system as it is similar to smodels. Including the upper closure 
computation into the modified Davis-Putnam method would probably be a 
lot harder. 

We conclude that even without lookahead the smodels algorithm prunes 
the search space significantly more than the branch and bound algorithm, 
the mixed integer programming approach, and the SLG system. Moreover, 
the smodels algorithm also prunes the search space more than the modified 
Davis-Putnam method and the dlv system. As the pruning in the smodels 
algorithm can be efficiently implemented, smodels will compute stable mod- 
els faster than the other systems if it is given a program that requires some 
search. 
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7 Experiments 



In order to demonstrate the performance of smodels, we test an implemen- 
tation, smodels version 2.23 [60], on some combinatorially hard problems. 
Since there are no competitive systems for computing stable models of logic 
programs, we compare smodels with some propositional satisfiability check- 
ers. The one stable model system that can approach the same magnitude 
of performance as smodels is dlv [28], and we also compare against it. The 
intention of the tests is to assess smodels in relation to other general pur- 
pose systems, not to compare it with a different special purpose algorithm 
for each problem. 

Each test instance is randomly shuffled and run ten times. We shuffle 
the test instances since a particular ordering might help the algorithms to 
avoid backtracking, thereby giving a skewed picture of their behavior. That 
is, we try to lessen the impact of lucky choices. The durations of the tests 
are given in seconds and they represent the time to find a solution or the 
time to decide that there are no solutions. They include the time it takes 
to read the input and write the result. The number of choice points, also 
known as branch points, describes how many times the algorithms use their 
heuristics to decide which atom to test next. 

All tests were run under Linux 2.2.12 on 450 MHz Pentium III computers 
with 256 MB of memory. 

7.1 3-SAT 

We compare smodels with three propositional satisfiability checkers: tableau 
or ntab [9], SATO 3.2 [68], and satz [31], and with dlv. The test domain is 
random 3-SAT, i.e., randomly generated propositional formulas in conjunc- 
tive normal form whose clauses contain exactly three literals. The problems 
are chosen such that the clause to atom ratio is 4.258 + 58.26a~ 5 / 3 , where 
a is the number of atoms, since this particular ratio determines a region of 
hard satisfiability problems [9]. 

The three satisfiability checkers are all variants of the Davis-Putnam 
procedure. SATO strengthens the procedure by adding clauses to the prob- 
lem during the search. Every time SATO arrives at a contradiction it stores 
the negation of the choices that led to the contradiction in a new clause. If 
the length of the clause is less than 20, then it is added to the set of clauses. 
This approach runs into problems if the number of added clauses grows too 
big. 

Tableau or ntab and satz both perform lookahead on a subset of all 
available atoms, but satz uses a more sophisticated heuristic, which is also 
used to measure the hardness of the problem during the search. If the 
problem is hard, then satz performs lookahead on all atoms. The program 
satz also does some preprocessing on the satisfiability problems during which 
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it adds clauses to the problem. 

We translate a 3-SAT problem into a logic program as follows. The 
truth-assignments of the atoms a± , . . . , a n of the problem are encoded by a 
choice rule 

{ai,...,On} «- 

and each clause 

a\ V • • • V a n V -161 V • • • V -ib m 

is translated into a rule 

false <— no£ ai, . . . , no£ a n , b±, ... , 6 m . 

Since the clauses have to be satisfied, we deny the inclusion of the atom 
false in the stable models using the statement 

compute {not false}. 

When we test dlv, we use the rules ctj <— noi en and Oj <— noi ctj, for 
i = 1, . . . ,n, instead of the choice rule. 

We test the implementations on problems having from 150 to 400 atoms. 
For each problem size we generate ten satisfiability problems using a program 
developed by Bart Selman [56]. Every problem is randomly shuffled and 
tested ten times. The test results are shown in Figures 7-8. The number of 
choice points is not available for dlv. 

The implementation of smodels prunes the search space more than SATO 
and ntab, but less than satz. In addition, SATO prunes the search space 
least of all. This indicates, as one would expect, that doing lookahead 
substantially reduces the search space. Since smodels is not as good at 
pruning the search space as satz, it seems that the heuristic of satz is better 
than that of smodels. 

There is, however, a difference between how smodels and satz propagate 
truth values. The satz procedure makes use of the pure literal rule. A literal 
is pure if its complement does not appear in any clauses. Hence, if a set of 
clauses is satisfiable, then one can remove all clauses containing pure literals 
and the remaining set of clauses will still stay satisfiable. Since smodels is 
designed such that it can compute all stable models of a program, it does 
not take advantage of this reduction. 

The heuristic of satz is similar to that of smodels. The heuristic of 
smodels measures how the set of undefined literals changes when we fix the 
truth value of an atom, while the heuristic of satz measures how the set of 
clauses changes when we fix the truth value of an atom. Let p and n be a 
measure of the change when the truth value of an atom is set to respectively 
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true or false. Then, smodels maximizes mm(n,p) and max(n,p), where 
min(n,p) is more significant, and satz maximizes 

1024np + n + p. 

We refer to these formulas as the cost functions of smodels and satz. In 
order to decide whether it is the heuristic of satz that is the reason for the 
better pruning, we have tested the following variants of smodels and satz on 
the 3-SAT problems: satz without the preprocessing step, satz without the 
pure literal rule, satz with the cost function of smodels measuring literals 
and measuring clauses, smodels with the pure literal rule, smodels with the 
cost function of satz, and smodels with both the pure literal rule and the cost 
function of satz. The result is that the variants prune the search space as 
much or slightly less than the original versions. We therefore conclude that 
the heuristic of satz is better than that of smodels on hard 3-SAT problems. 

We will use the fact that we shuffled and tested each satisfiability problem 
ten times, to measure how tightly the heuristics define which literal to try 
next. If a heuristic is lax, then it is possible to refine it such that it breaks 
the ties between the literals in a better way. For each satisfiability problem 
we compute the ratio between the largest and smallest number of choice 
points needed to solve a randomly shuffled instance of the problem. The 
results are shown in Figure 9. 

Clearly, satz has a very tight and smodels a very lax heuristic. 

7.2 Pigeon-hole Problems 

We test smodels, satz, and SATO on some pigeon-hole problems, where 
the number of pigeons is one more than the number of holes. The SATO 
program generates the satisfiability problems for itself and satz. Since the 
generated problems are not 3-SAT problems and since ntab does not handle 
clauses of length greater than three, we do not test ntab. We encode the 
pigeon-hole problems for smodels as in Section 5. When we test dlv, we 
replace a cardinality rule of the form 

false <-2{p 1 ,...,p n } 
with the basic rules 

false <- Pn,Pi 2 ,Pi 3 , 1 < k < *2 < h < n. 

Similar translations are used in the following tests and will not be mentioned. 
The results are shown in Figures 10-11. 

We notice that smodels and satz explore very similar sized search spaces. 
If we examine the durations of the tests, we see that the overhead of smodels 
is smaller than it was on the 3-SAT problems. This is explained by the com- 
pact encoding of the pigeon-hole problem. The program SATO experiences 
a strange improvement when there are ten pigeons. 
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7.3 Hamiltonian Cycles 



A Hamiltonian cycle is a cycle in a graph such that the cycle visits each node 
precisely once. If G = (V, E) is an undirected graph, then we encode the 
Hamiltonian cycles of G in a program as follows. For each edge {v, w} G E 
we make an atom e„ ;TO . Since the graph is undirected, we do not distinguish 
between e VjW and e WjV . The idea of the encoding is that if e V;W is in a stable 
model, then {v, w} participates in a Hamiltonian cycle. 

We notice that if v is a vertex of a cycle, then there are exactly two edges 
incident to v that are in the cycle. Hence, we create the three rules 

{&v,wi j ■ • ■ j &v,w n } * {v, Wij G E 

false <- 3 {e„ jWl , . . . , e^^} {i>, Wj} G -E 

/a/se <— n - 1 {noi e„ jW1 , . . . , noi e„ )U , n } {u, Wj} G £ 

for every vertex v of G. We must now avoid stable models that contain more 
than one cycle. First we pick an arbitrary vertex v\ G V and then we create 
the rule 

vi <- 

and the rules 

w <— v, e V;W {v, w} £ E and iw 7^ «i. 

It follows that a vertex u is in a stable model if and only if v and v± are in 
the same cycle. Hence, we can force the stable models to contain exactly 
one cycle by including the compute statements 

compute {vi, ... ,v n } vi,...,v n EV 

and 

compute {not false}. 

We translate the Hamiltonian cycle problem into clauses following Pa- 
padimitriou [49]. The translation encodes a total order on the vertices of 
the graph such that there is an edge between any pair of vertices that are 
adjacent in the order. Given the vertices v\, . . . ,v n , we use the atom Vij to 
encode that vertex V{ is in position j using the clauses: 

Vi is in some position, 
Vi is in at most one position, 
some vertex is in position j, and 
Vi and Vj are not in the same position. 



V • • • V v i>n 
^Vij V ->v i>k j + k 

Vl,j V • • • V V nJ 

->v i k V ->v j k i + j 
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Then we deny orders that do not correspond to Hamiltonian cycles: 
-Wi,fc V ->v jjk+lmodn {vi,Vj} E. 

Hence, if the graph has n vertices, then we need n 2 atoms and on the order 
of n 3 clauses. 

One can also create a more complex Hamiltonian cycle translation that 
mirrors the logic programming translation. For a graph G and for each 
edge {v,w} £ E, we make an atom e v<w . As before, we do not distinguish 
between the atoms e v>w and e wv . For a vertex v € V, let the incident edges 
be {v, w±}, . . . , {v, w n }. We force the inclusion of at least two incident edges 
by creating the clauses 

e v , Wil V • • • V e v ,w ik I < k < k < ■ ■ ■ < ik <n, k = n-l 

and we deny the inclusion of more than two edges by creating the clauses 

^v,w h V ^e VyWt2 V ^e VyWt3 1 < h < i 2 < h < n 

We avoid multiple cycles by picking a vertex and demanding that there is 
a path to every other vertex. For every vertex v, we create an atom v k , 
for k = 0, . . . , n, that denotes that v is reachable through a path of length 
k. We keep the final conjunctive normal form encoding small by letting an 
auxiliary atom t£ denote that w is reachable in k steps and that v is one 
step away from w. Thus, the formulas 

v k+1 "t k v>wi V-.-Vt*^ fc = 0,l,...,n-l, 

tvm e v,wi A wf i = l,...,n, and 

v 1 V • • • V v n 

ensure that there is a path from some vertex to v. Finally, we pick a vertex 
v that begins all paths by creating the clauses 

v° 

and 

-iw° !c/d and w G V. 

We solve the Hamiltonian cycle problem on a special type of planar 
graphs created by the plane function found in the Stanford GraphBase [26]. 
We generate ten graphs for each problem size and all these graphs have 
Hamiltonian cycles. The results are displayed in Figures 12-13. We observe 
that the second satisfiability encoding is better for SATO and mostly better 
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Hamiltonian cycle problems, minimum 
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for satz. Apparently, the heuristic of satz does not work well on these 
problems. 

It is precisely problems of this type that provides us with an incentive to 
use a stable model semantics solver instead of a satisfiability checker. Any 
problem that one can easily encode as a satisfiability problem we can just 
as easily encode as a logic program. The converse does not hold. 

Consider a mapping T from logic programs to sets of propositional 
clauses. We say that T is modular if for every program partitioned into 
two disjoint parts Pi and P2, the program Pi U P2 has a stable model if and 
only if T(Pi) U T(P 2 ) is satisfiable. 

Proposition 7.1 (Niemela [42]). There is no modular mapping from the 
class of logic programs to the sets of clauses. 

Proof. Consider the program P = {p <— not p} and assume that T is a 
modular mapping. Then, T(P) is unsatisfiable as P has no stable models. 
It follows that also T(P) U T({p <— }) is unsatisfiable. But this implies that 
PU {p ^} has no stable models, which is clearly not the case. Hence, T is 
not modular. □ 

Even if there is no local translation of logic programs into satisfiability 
problems, there are more complex ones [3]. 

Example 7.2. The translation from a logic program to a satisfiability prob- 
lem has two parts. The first part ensures that the rules of the logic program 
are satisfied and the second part ensures that an atom can not justify its own 
inclusion in a model. It follows that a model of the translation is grounded 
and that it corresponds to a stable model of the original logic program. 

Each atom in the logic program has a corresponding atom in the satis- 
fiability problem. In addition, there are new atoms that assign indices to 
these atoms. By requiring that an atom can only be justified by atoms of 
lower index, we avoid circular justifications. 

For example, let P be the program 

p <- q 
q^p. 

We translate P into a set of propositional clauses as follows. First, we 
include the clauses 

-1(7 V p and -*p V q, 

so that if q is true then also p is true and if p is true then also q is true. 

Then, we introduce the new atoms p±, P2, qi, and (72 whose truth- values 
decide what indices p and q have. The formulas p\ V P2, ->pi V ->p2, gi V 52, 
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and -igi V -1(72 assign precisely one index to p and one to q. Finally, the two 
formulas 

->p V (q A q\ A P2) and ->q V (p A p\ A 52) 

guarantee that p follows from g only if the index of q is lower than that of 
p and that q follows from p only if the index of p is lower than that of q. 

One problem remains. If p is false, then either p\ or P2 is true, and we 
get two models instead of one. Therefore, we set the index of p to 1 when 
it is false. The same must be done for q. Hence, we include the formulas 

pV p\ and qV qi. 

This satisfiability problem has only one model, {pi,qi}, which corre- 
sponds to the empty stable model of P. 

Take the program P = {p <— not p} from the proof of Proposition 7.1. 
We can translate P into a satisfiability problem without using any indices 
as the atom p can not justify its own inclusion in a stable model. The 
translation consists of two clauses. The clause p V p guarantees that the 
only rule in P is satisfied and the clause ->p V ->p guarantees that if p is true, 
then it is justified by the only rule. The two clauses have no models and the 
program has no stable models. 

If we add the rule p <— to P, then we have to change the translation. 
The clause p\l p remains unchanged and we add the clause p to keep p <— 
satisfied. The clause —>p V —>p is replaced by —>p V —>p V T, where T is a 
tautology. The new translation has {p} as its only model. 

It is now clear that the more involved stable model semantics incurs a 
computational overhead. But in exchange for the overhead we gain a more 
powerful language. Hence, problems that can be more compactly repre- 
sented by logic programs can still be more quickly solved with smodels than 
with a satisfiability checker. 

7.4 Error-correcting Codes 

We will search for sets of binary words of length n such that the Hamming 
distance between any two words is at least d. The size of the largest of 
these sets is denoted by A(n,d). For example, A(5, 3) = 4 and any 5- 
bit one-error-correcting code contains at most 4 words. One such code is 
{00000,00111,11001,11110} = {0,7,25,30}. Finding codes becomes very 
quickly very hard. For instance, it was only recently proved that A(10, 3) = 
72 [48]. 

We construct a program whose stable models are the maximal codes 
with Hamming distance d. If j± , . . . , jk are the words whose distance to i is 
positive and less than d, then we create a rule 

Wi <— not Wj 1 , . . . , not Wj k 
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for every i = 0, . . . , 2 n . Since a code remains a code even if we swap the 
zeroes for ones or permute the positions of the bits in every word in the 
same way, we can restrict ourselves to codes that include the zero word and 
a word whose d lowest bits are set. Therefore, we create the rules 

false <— not Wj 1 , not Wj 2n _ d , 

where jk = 2 d (k + 1) — 1, and the compute statement 

compute {not false}. 

Since we want to search for the largest stable model, we include the maximize 
statement 

maximize {u>o, • • • , tf2 n }- 
The results are shown in Figure 14. 

7.5 Bin-packing 

In order to test the weight rules we try smodels on some bin-packing prob- 
lems. The object is to pack a number of items of varying sizes into a number 
of bins of equal size. We represent the fact that item i is in bin j by the 
atom bij, and we assume that the size of item i is given by the positive 
integer wi. If we have n items and m bins, then we can distribute the items 
among the bins using the rules 

{bi,i, • • • , <— 

false <- 2{h i) i,. . . ,b ijm } 

false <— not bi t i, . . . , not bi jTn i = 1, . . . , n. 

Let the bins have size b. We prevent the bins from containing too many 
items with the help of the rules 

false <- {bij =wi,..., b n j = w n } > b + 1 j = 1, . . . , m. 

Finally, we include the rule 

compute {not false} 

as we do not want false to be in any stable model. 

For our tests we choose the sizes of the items uniformly from the integer 
interval 1, . . . , max for some number max. A bit of experimentation shows 
that most bin-packing problems are easy. However, smodels have problems 
when there are many items and the expected total size of all the items 
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Figure 14: Maximal error-correcting codes 
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equals the available space in the bins. In hindsight, this is not surprising as 
it includes the case when the items almost fit. 

We solve bin-packing problems with 16 items, bins of size 16, and with 
the maximum size of the items set to twice the number of bins. The results 
are shown in Figure 15. As a comparison, a mixed integer linear program- 
ming system such as lp_solve [4] solves each of these problems in about 0.01 
seconds. 
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Bin-packing: 16 items 
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8 Conclusions 



We have explored an algorithm that solves the stable model semantics for 
logic programs. We have shown that it is comparatively easy to extend the 
semantics and the algorithm to handle new types of rules. We have also 
shown that one can easily change the algorithm to search for specific stable 
models such as the lexicographically smallest or largest one. 

We have compared the algorithm with three good satisfiability solvers 
on random satisfiability problems, pigeon-hole problems, and Hamiltonian 
cycle problems. The best satisfiability solver goes through a smaller search 
space than our algorithm when testing the random SAT problems. We have 
attributed the difference to the different heuristics of the procedures, and we 
have found indications that our heuristic can be refined such that it works 
better. The algorithm and the solvers behave similarly on the pigeon-hole 
problems, while our algorithm is significantly better than the solvers when 
it comes to the Hamiltonian cycle problems. Since the Hamiltonian cycle 
problem contains more structure, it requires both a good heuristic and full 
lookahead before it can be solved satisfactorily. 

To conclude, the stable model semantics has a computational overhead. 
But the overhead provides us with a more powerful language. Consequently, 
problems that can be more compactly represented by logic programs can be 
more quickly solved with smodels than with a satisfiability checker. 

8.1 Future Work 

Since testing every literal before resorting to a heuristic improves the de- 
cision procedure, one can ask if testing every two literals or every set of n 
literals would improve the algorithm even further. The problem is, of course, 
the overhead. Ordinary lookahead calls expand in the worst case a linear 
number of times. If we test two literals, then we call expand a quadratic 
number of times, and if we test sets of n literals, then the number of expand 
calls is already on the order of the number of atoms to the power of n. 

Luckily we can approximate n-lookahead if we are prepared to use a 
quadratic amount of memory. Assume that a, b expand(P, A) and that 
b € lookahead (P, AU {a}). Then, any stable model S that agrees with A but 
do not contain b can not contain a. Hence, if we store the fact that not b 
implies not a, then we can use this information to strengthen expand. Later 
calls to lookahead will then take advantage of all the relations between the 
literals that previous calls have found. 

The problem is that even a quadratic amount of memory seems to create 
too much overhead. Two questions are therefore left to future research. 
Can one avoid the memory overhead by making use of the structure of 
the programs? Does there exist another approximation that evades this 
problem? 
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A Monotone Functions 



Let X be a set and let / : 2 — ► 2 be a function. If A C B implies 
f(A) C /(B), then / is monotonic. We have the following version of the 
Knaster-Tarski fixpoint theorem. 

Lemma A.l. Let f : 2 X — > 2 X be a monotonic function, and let A C X. 
If f(A) C A, then Ifp (/) C A, where Ifp (f) denotes the least fixed point of 
f- 

Proof. Define 

s= n a (f(x)Qx). 

f(A)CA 

Then, f(A) C A implies S C A, which in turn implies f(S) C /(A) by the 
monotonicity of /. Hence, /(£) C A, and consequently 

/(5)= n /(^)^ n ^= 5 - 

/(A)CA /(A)CA 

Now, /(5 1 ) C S implies C f(S), which by the definition of 5 

implies S C Thus, 5 = /(S 1 ). Moreover, for any fixed point A, 

/(A) C A implies SCA, 

and hence Ifp (/) = 5 by definition. □ 

Similarly, ^4 C f(A) implies A C g/p (/) for the greatest fixed point 
of /. Notice that if X is finite, then Ifp (f ) = f n ($) for some n < \X\ 
since /(0) C Z/p (/). Furthermore, observe that if we are given k monotonic 
functions fi, ■ ■ ■ , fk, then the least fixed point of 

k 

g(A) = {Jf t (A) 
i=i 

is the limit of any nest 

A n+1 = A n U f i(n) (A n ), A Q = % and f i{n) {A n ) C A n => Vjfj{A n ) C A n . 

In other words, the least fixed point of 5 can be computed by repeated 
applications of /1 , . . . , Finally, note that a £ Z/p (5) if and only if there 
is a sequence i(0), . . . , i(n) such that a G Ai+i- 



87 



88 



B Auxiliary Functions for Atleast(P, A) 



We present the auxiliary functions used by Atleast(P, A) for cardinality, 
choice, and weight rules. We begin with the choice rule. 

function r.fireQ 

r. literal := r. literal — 1. 

function r .inactivate^) 
r. inactive := r. inactive + 1 
if r. inactive = 1 then 

for each atom a in r.head do 
a.headof := a.headof — 1 
if a.headof = then 

negq.push(a) 
else if a.inA + and a.headof = 1 then 
Let r' be the only active rule in a.hlist 
r' .backchaintrue() 
end if 
end for 
end if. 

function r.backchaintrueQ 
if r. literal > then 

for every a € r.body + do 

posq.push(a) 
end for 

for every a € r.body+ do 

negq.push(a) 
end for 
end if. 

function r.backchainfalseQ 
return. 

A cardinality rule r 

h <— k {a±, . . . , a n , not b±, . . . , noi b m } 

does not need an additional variable that keeps track of k if r. literal is 
initialized to k and r. inactive is initialized to A; — (n + m). 
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function r.fireQ 

r. literal := r. literal — 1 
if r. literal = then 
posq.push (r. head ) 
else if r .head .in A~ then 

r. backchainfalse() 
end if. 

function r.inactivate{) 
r. inactive := r. inactive + 1 
if r. inactive = 1 then 
a := r.head 

a.headof := a.headof — 1 
if a.headof = then 

negq.push(a) 
else if a.inA + and a.headof = 1 then 

Let r' be the only active rule in a.hlist 

r' .backchaintrueQ 
end if 
end if. 

function r.backchaintrue() 

if r. literal > and r. inactive = then 
for every a £ r.body + do 

posq.push(a) 
end for 

for every a £ r.body~ do 

negq.push(a) 
end for 
end if. 

function r.backchainfalse() 

if r. literal = 1 and r. inactive < then 
for every a £ r.body + do 
if a.inA + = false then 

negq.push{a) 
end if 
end for 

for every a G r.body+ do 
if a.inA~ = false then 

posg.jras/i(a) 
end if 
end for 
end if. 
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A weight rule r 

h <- {01 = w ai , . . . , a n = w an , noi 61 = w bl , . . . , not b m = w bm } >w 

will need some auxiliary variables. If a is an atom in the body of r, then 
let a. weight be the weight of the atom in r. For a partial model A, let 
r.atleast = w, let 

r.max = a. weight + b. weight 

a£r.body + —A~ b£r.body~ — A+ 



and let 



r.min = a. weight + b. weight. 

a£r.body + nA+ b£r.body~ C\A- 



function r.fireQ 

Let a be the atom that is being given a truth value 
r.min = r.min + a. weight 

if r.max > r.atleast and r.min — a. weight < r.atleast then 
if r.min > r.atleast then 

posq.push (r.head) 
else if r.head.inA~ = true then 

r. backchainfalse () 
end if 
end if. 

function r.inactivateQj 

Let a be the atom that is being given a truth value 
r.max = r.max — a. weight 

if r.max + a. weight > r.atleast and r.min < r.atleast then 
if r.max < r.atleast then 
a := r.head 

a.headof := a.headof — 1 
if a.headof = then 

negq.push(a) 
else if a.inA + and a.headof = 1 then 

Let r' be the only active rule in a.hlist 

r' .backchaintrueQ 
end if 

else if r.head.inA + = true and r .head .headof = 1 then 

r. backchaintrue () 
end if 
end if. 
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Consider the case of backchaintrue() and a G r.body. If 

r.max — a. weight < r.atleast, 

then a must be pushed onto the queue posq. On the other hand, if 

r.max — a. weight > r.atleast, 

then we can immediately skip all atoms whose weight is less than a.weight. 

We take advantage of this observation in the following way. We in- 
troduce two new variables: r.last + and r.last" , and we go through the 
body of r in decreasing weight order. When we do backward chaining in 
r.backchaintrue() we start with the atom given by r.last + and check every 
atom until we arrive at an atom a for which r.max — a.weight > r.atleast. 
Then, we stop and update r.last + to a. When we backtrack we must restore 
r.last + to its previous value, and this can easily be done without needing 
any extra memory. If we remove the truth value of an atom a or if we remove 
a from a queue, and if a.weight > r.last+ .weight, then we set r.last + = a. 

function r.backchaintrueQ 
if r.min < r.atleast then 

for a G Atoms (r.body) in order, largest weight first, starting with 
r.last + do 
r.last + = a 

if a.inA + = false and a.inA~ = false then 
if r.max — a.weight < r.atleast then 
if a G r.body + then 

posq.push(a) 
else 

negq.push(a) 
end if 
else 

return 
end if 
end if 
end for 
end if. 

function r.backchainfalse() 

if r.max > r.atleast and r.min < r.atleast then 

for a G Atoms(r.body) in order, largest weight first, starting with 
r.last~ do 
r.last~ = a 

if a.inA + = false and a.inA~ = false then 
if r.min + a.weight > r.atleast then 
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if a G r.body + then 

negq.push(a) 
else 

posq.push(a) 
end if 
else 

return 
end if 
end if 
end for 
end if. 
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C Auxiliary Functions for Atmost(P, A) 



We present the auxiliary functions used by Atmost(P,A) for cardinality, 
choice, and weight rules. We begin with the choice rule. 

function r.propagateFalsei) 
r. upper := r. upper + 1 
if r. upper = 1 and r. inactive = then 
for every a € r.head do 

if a. source = or a. source = r then 
a. source := 
queue, push(a) 
end if 
end for 
end if. 

function r.propagateTrueQ 
r. upper := r. upper — 1 
if r. upper = and r. inactive = then 
for every a € r.head do 
if a. source = then 

a. source := r 
end if 

queue. push(a) 
end for 
end if. 

function r.isUpperActive() 

if r. upper = and r. inactive = then 

return true 
else 

return false 
end if. 

For a cardinality rule r 

h <— k {ai, . . . , a n , not b±, . . . , not b m } 

we initialize r. upper to k — m. We also need a counter r. lower that holds 
the value fe — \r.body~ — A + \. 
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function r.propagateFalseQ 
r. upper := r. upper + 1 
if r. lower > 1 and r. inactive < and 

(r. head. source = or r. head. source = r) then 

r. head. source := 

queue. push(r. head) 
end if. 

function r.propagateTrue() 
r. upper := r. upper — 1 
if r. upper = and r. inactive < then 
if r. head. source = then 

r. head. source := r 
end if 

queue. push(r .head) 
end if. 

function r. is Upper ActiveQ 

if r. upper < and r. inactive < then 

return true 
else 

return false 
end if. 

We can optimize the auxiliary functions a bit by changing r. lower to 
keep track of the value 



where B is the set of atoms in r.body + that are not part of a positive loop 
that goes through r. 
A weight rule r 

h <- {ai= w ai ,. ..,a n = w an ,not h = w bl ,. ..,notb m = w bm } > w 

also needs the two variables r. upper and r. lower. The variable r. upper is 
initialized to 



k-\r.body - A + \-\B - A 




b. weight 



bgr. body 



and r. lower holds the value 





b. weight 



a£B-A~ 



bGr.body —A+ 



where B is defined as above. 
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function r.propagateFalse () 

Let a be the atom that is being removed from the upper closure 
r. upper := r. upper — a. weight 

if r.max > r.atleast and r. upper + a. weight > r.atleast and r. lower < 
r.atleast and (r. head. source = or r. head. source = r) then 

r. head. source := 

queue. push(r. head) 
end if. 

function r.propagateTrue() 

Let a be the atom that is being added to the upper closure 
r. upper := r. upper + a. weight 

if r.max > r.atleast and r. upper — a. weight < r.atleast and r. upper > 
r.atleast then 

if r. head. source = then 
r. head. source := r 

end if 

queue. push(r. head) 
end if. 

function r. is Upper Active() 
if r. upper > r.atleast then 

return true 
else 

return false 
end if. 
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D Time-Line 

A time- line for the releases of smodels that introduced new features. 



Version 




Date 


Description 


1.0 


28.5 


1995 


First public release 


1.1 


7.3 


1996 


Fitting semantics 


1.2 


28.3 


1996 


Backward chaining if head is true, 








optional lookahead 


1.3 


27.9 


1996 


Backward chaining if head is false 


1.6 


30.6 


1997 


Lookahead is on by default, 








the heuristic is introduced 




31.8 


1997 


Work on smodels 2.0 has begun 


1.8 


4.9 


1997 


Strongly connected components 








optimization of the upper closure 


pre-2.0-4 


25.3 


1998 


Source pointer 


2.0 


22.10 


1998 


New rule types 


2.6 


27.1 


1999 


Reduction of the search space 
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